Reference Guide

217 | ids dos-profile Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide
disconnect-sta-assoc-resp-
threshold
The number of successful Association Response
or Reassociation response frames seen in an
interval of 10 seconds that should trigger this
event.
1-30 5
disconnect-sta-quiet-time After a station disconnection attack is detected,
the time, in seconds, that must elapse before
another identical alarm can be generated.
60-
360000seco
nds
900
seconds
eap-rate-quiet-time After an EAP rate anomaly alarm has been
triggered, the time, in seconds, that must elapse
before another identical alarm may be triggered.
60-360000 900
seconds
eap-rate-threshold Number of EAP handshakes that must be received
within the EAP rate time interval to trigger an
alarm.
0-100000 60
eap-rate-time-interval Time, in seconds, during which the configured
number of EAP handshakes must be received to
trigger an alarm.
1-120
seconds
3 seconds
fata-jack-quiet-time Time to wait, in seconds, after detecting a FATA-
Jack attack after which the check can be
resumed.
60-360000
seconds
900
seconds
invalid-address-combination-
quiet-time
Time to wait, in seconds, after detecting an invalid
address combination after which the check can be
resumed.
60-360000
seconds
900
seconds
malformed-association-request-
quiet-time
Time to wait, in seconds, after detecting a
malformed association request after which the
check can be resumed.
60-360000
seconds
900
seconds
malformed-auth-frame-quiet-time Time to wait, in seconds, after detecting a
malformed authentication frame after which the
check can be resumed.
60-360000
seconds
900
seconds
malformed-htie-quiet-time Time to wait, in seconds, after detecting a
malformed HT IE after which the check can be
resumed.
60-360000
seconds
900
seconds
malformed-large-duration-quiet-
time
Time to wait, in seconds, after detecting a large
duration for a frame after which the check can be
resumed.
60-360000
seconds
900
seconds
no Negates any configured parameter. — —
omerta-quiet-time Time to wait, in seconds, after detecting an Omerta
attack after which the check can be resumed.
60-360000
seconds
900
seconds
omerta-threshold The Disassociation packets received by a station
as a percentage of the number of data packets
sent, in an interval of 10 seconds.
1-100 10%
overflow-eapol-key-quiet-time Time to wait, in seconds, after detecting a
overflow EAPOL key request after which the check
can be resumed.
60-360000
seconds
900
seconds
overflow-ie-quiet-time T
ime to wait, in seconds, after detecting a
overflow IE after which the check can be resumed.
60-360000
seconds
900
seconds
probe-request-rate-thresholds Rate threshold for probe request frames. — —
probe-response-rate-thresholds Rate threshold for probe response frames. — —
rts-rate-quiet-time Time to wait, in seconds, after detecting an RTS
rate anomaly after which the check can be
resumed.
60-360000
seconds
900
seconds
Parameter Description Range Default