Concept Guide

379| firewall Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Parameter Description Range Default
prohibit-ip-spoofing
Detects IP spoofing (where an
intruder sends messages using
the IP address of a trusted
client). When this option is
enabled, source and
destination IP and MAC
addresses are checked;
possible IP spoofing attacks are
logged and an SNMP trap is
sent.
— enabled
in IPv4
disable
d in
IPv6
prohibit-rst-replay
Closes a TCP connection in
both directions if a TCP RST is
received from either direction.
You should not enable this
option unless instructed to do
so by a Dell representative.
— disable
d
session-idle-timeout
Time, in seconds, that a non-
TCP session can be idle before
it is removed from the session
table. You should not modify
this option unless instructed to
do so by a Dell representative.
16-259 15
second
s
session-mirror-destination
This parameter is deprecated.
Use the packet-capture
command.
—
—
session-mirror-ipsec
This parameter is deprecated.
Use the packet-capture com-
mand.
— —
session-tunnel-fib
Enable session tunnel-based
forwarding.
NOTE: Best practices is to
enable this parameter only
during maintenance window or
off-peak production hours.
— disabled
session-voip-timeout
Idle session timeout, in
seconds, for sessions that are
marked as voice sessions. If no
voice packet exchange occurs
over a voice session for the
specified time, the voice
session is removed.
16-300 300
second
s
shape-mcast
Enables multicast optimization
and provides excellent
streaming quality regardless of
the amount of VLANs or IP
IGMP groups that are used.
— disable
d