Concept Guide

406| ids dos-profile Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
power-save-dos-quiet-time
power-save-dos-threshold
probe-request-rate-thresholds <number>
probe-response-rate-thresholds <number>
rts-rate-quiet-time
rts-rate-threshold
rts-rate-time-interval
spoofed-deauth-blacklist
tkip-replay-quiet-time
Description
This command configures traffic anomalies for denial of service (DoS) attacks.
Syntax
Parameter Description Range Default
<profile>
Name that identifies an
instance of the profile. The
name must be 1-63
characters.
— “defaul
t”
ap-flood-inc-time
Time, in seconds, during
which a configured number
of fake AP beacons must be
received to trigger an alarm.
0-36000 3600
second
s
ap-flood-quiet-time
After an alarm has been
triggered by a fake AP flood,
the time, in seconds, that
must elapse before an
identical alarm may be
triggered.
60-360000 900
second
s
ap-flood-threshold
Number of fake AP beacons
that must be received within
the flood increase time to
trigger an alarm.
0-100,000 50
assoc-rate-thresholds
Rate threshold for associate
request frames.
— —
auth-rate-thresholds
Rate threshold for
authenticate frames.
— —
block-ack-dos-quiet-time
Time to wait, in seconds,
after detecting an attempt to
reset the receive window
using a forged block ACK
add.
60-360000
seconds
900
second
s
chopchop-quiet-time
Time to wait, in seconds,
after detecting a ChopChop
attack after which the check
can be resumed.
60-360000
seconds
900
second
s