Dell PowerConnect W-7200 Series, Reference Manual

Page: 1514 / 1538

1514 | wlan virtual-ap Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Parameter Description Range Default
that although a virtual AP profile can be
replicated from a master controller to local
controllers, stateful firewall settings do not. If
you select the broadcast-filter all option for a
Virtual AP Profile on a master controller, you
must enable the broadcast-filter arp setting on
each individual local controller.
arp
If enabled, all broadcast ARP requests are
converted to unicast and sent directly to the
client. You can check the status of this option
using the show ap active and the show
datapath tunnel command. If enabled, the
output will display the letter a in the flags
column.
Do not enable this option for virtual APs
configured in bridge forwarding mode. This
configuration parameter is only intended for use
for virual APs in tunnel mode. In tunnel mode,
all packets travel to the controller, so the
controller is able to convert ARP requests
directed to the broadcast address into unicast.
When a virtual AP is configured to use bridge
forwarding mode, most data traffic stays local
to the AP, and the controller is not able to
convert that broadcast traffic. — disabled
clone
Name of an existing traffic management profile
from which parameter values are copied. — —
deny-inter-user-traffic
Select this checkbox to deny traffic between the
clients using this virtual AP profile.
The firewall comand includes an option to deny
all inter-user traffic, regardless of the Virtual AP
profile used by those clients.
If the global setting to deny inter-user traffic is
enabled, all inter-user traffic between clients
will be denied, regardless of the settings
configured in the virtual AP profiles. If the
setting to deny inter-user traffic is disabled
globally but enabled on an individual virtual ap,
only the traffic between un-trusted users and
the clients on that particular virtual AP will be
blocked.
— disabled
deny-time-range Specify the name of the time range for which
the AP will deny access. Time ranges can be
defined using the CLI command
time-range .
— —
dos-prevention
If enabled, APs ignore deauthentication frames
from clients. This prevents a successful deauth
attack from being carried out against the AP.
This does not affect third-party APs. — disabled
dot11k-profile
Name of an 802.11k profile to be associated with
this VAP. — default
dynamic-mcast-optimization
Enable/Disable dynamic multicast optimization.
This parameter can only be enabled on a — disabled