Release Notes

1303 | show firewall Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
Parameter Description
Rate limit CP trusted ucast traffic
Displays the trusted unicast traffic rate limit.
Rate limit CP trusted mcast traffic
Displays the trusted multicast traffic rate limit.
Rate limit CP route traffic
Displays the traffic rate limit for traffic that needs
generated ARP requests.
Rate limit CP session mirror traffic
Displays the traffic rate limit for session mirrored
traffic forwarded to the controller.
Rate limit CP auth process traffic
Displays the traffic rate limit for traffic forwarded
to the authentication process.
Deny inter user traffic
If enabled, this setting disables traffic between all
untrused users. You can configure user role
policies that prevent Layer-3 traffic between users
or networks but this does not block Layer-2 traffic.
Prohibit ARP Spoofing
When this option is enabled, possible arp spoofing
attacks are logged and an SNMP trap is sent.
Stateful VOCERA Processing
VOCERA processing is disabled by default.
Stateful UA Processing
UA processing is disabled by default.
Enforce bw contracts for broadcast traffic
If enabled, bw contracts are applied ot local
subnet broadcast traffic.
Multicast automatic shaping
If enabled, enables multicast optimization and
provides excellent streaming quality regardless of
the amount of VLANs or IP IGMP groups that are
used.
Stall Detection
If enabled, triggers datapath crash on stall detec-
tion. Applies to the to W-7200 Seriescontrollers
only.
Enforce TCP Sequence numbers
If enabled, prevents data from passing between
two clients until the three-way TCP handshake has
been performed.
AMSDU Rx
Aggregated Medium Access Control Service Data
Units (AMSDU) packets are dropped if this option
is enabled.
Jumbo Frames
If enabled, supports up to 9216 bytes of payload on
the controller.
Session-tunnel FIB
Enables session tunnel based forwarding.
Prevent DHCPExhaustion
If enabled, this option checks for DHCP client hard-
ware address against the packet source MAC
address. This command checks the frame's source-
MAC against the DHCPv4 client hardware address
and drops the packet if it does not match. This fea-
ture prevents a client from submitting multiple
DHCP requests with different hardware addresses,