Dell PowerConnect W-7200 Series, Reference Manual

Page: 282 / 1538

282 | ids dos-profile Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
power-save-dos-min-frames
power-save-dos-quiet-time
power-save-dos-threshold
probe-request-rate-thresholds <number>
probe-response-rate-thresholds <number>
rts-rate-quiet-time
rts-rate-threshold
rts-rate-time-interval
spoofed-deauth-blacklist
tkip-replay-quiet-time
Description
This command configures traffic anomalies for denial of service (DoS) attacks.
Syntax
Parameter Description Range Default
<profile>
Name that identifies an instance of the
profile. The name must be 1-63 characters. — “default”
ap-flood-inc-time
Time, in seconds, during which a configured
number of fake AP beacons must be
received to trigger an alarm. 0-36000 3600
seconds
ap-flood-quiet-time
After an alarm has been triggered by a fake
AP flood, the time, in seconds, that must
elapse before an identical alarm may be
triggered. 60-360000 900
seconds
ap-flood-threshold
Number of fake AP beacons that must be
received within the flood increase time to
trigger an alarm. 0-100,000 50
assoc-rate-thresholds
Rate threshold for associate request frames. — —
auth-rate-thresholds
Rate threshold for authenticate frames. — —
block-ack-dos-quiet-time
Time to wait, in seconds, after detecting an
attempt to reset the receive window using a
forged block ACK add. 60-360000
seconds 900
seconds
chopchop-quiet-time
Time to wait, in seconds, after detecting a
ChopChop attack after which the check can
be resumed. 60-360000
seconds 900
seconds
client-ht-40mhz-intol-quiet-
time <seconds>
Controls the quiet time (when to stop
reporting intolerant STAs if they have not
been detected), in seconds, for detection of
802.11n 40 MHz intolerance setting. 60-360000
seconds 900
seconds
client-flood-inc-time
Number of consecutive seconds over which
the client count is more than the threshold. 0-36000
seconds 3 seconds
client-flood-quiet-time
Time to wait, in seconds, after detecting a
client flood before continuing the check. 60-360000
seconds 900
seconds
client-flood-threshold
Threshold for the number of spurious clients 0-100000 150