Concept Guide

1487| show firewall Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Stateful SIP Processing Enabled
Allow tri-session with DNAT Disabled
Disable FTP server No
Blacklist ARP attack client Disabled
Monitor ARP attack Disabled
Monitor Gratuitous ARP attack Enabled 50/sec
GRE call id processing Disabled
Session Idle Timeout Disabled
WMM content enforcement Disabled
Session VOIP Timeout Disabled
Stateful H.323 Processing Enabled
Stateful SCCP Processing Enabled
Only allow local subnets in user table Disabled
Monitor/police CP attacks Disabled
Rate limit CP untrusted ucast traffic Enabled 9765 pps
Rate limit CP untrusted mcast traffic Enabled 1953 pps
Rate limit CP trusted ucast traffic Enabled 65535 ps
Rate limit CP trusted mcast traffic Enabled 1953 pps
Rate limit CP route traffic Enabled 976 pps
Rate limit CP session mirror traffic Enabled 976 pps
Rate limit CP auth process traffic Enabled 976 pps
Deny inter user traffic Disabled
Prohibit ARP Spoofing Disabled
Stateful VOCERA Processing Enabled
Stateful UA Processing Enabled
Enforce bw contracts for broadcast traffic Disabled
Multicast automatic shaping Disabled
Stall Detection Enabled
Enforce TCP Sequence numbers Disabled
AMSDU Rx Enabled
Jumbo Frames Disabled
Session-tunnel FIB Enabled
Prevent DHCP exhaustion Disabled
Stateful SIPS Processing Enabled
Deny source routing Disabled
Immediate Freeback Disabled
DPI Classification Enabled [Cfg: enabled, PEF license: installed]
STUN Based Traversal Enabled
Web Content Classification Enabled
Web Content Cache Miss Drop Disabled
Stateful ICMP Processing Disabled
Optimize Duplicate Address Detection frames Enabled
IP classification Enabled
The output of this command includes the following information:
Parameter Description
Enforce TCP handshake before allowing data
If enabled, this feature prevents data from
passing between two clients until the three-way
TCP handshake has been performed. This option
should be disabled when you have mobile clients
on the network as enabling this option will cause
mobility to fail. You can enable this option if there
are no mobile clients on the network.
Prohibit RST replay attack
If enabled, this setting closes a TCP connection in
both directions if a TCP RST is received from
either direction.