Reference Guide

Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide show ap config | 623
Minimum number of spatial
streams usable for STBC
transmission
Controls the maximum number of spatial streams usable for STBC reception. 0 disables
STBC reception, 1 uses STBC for MCS 0-7. Higher MCS values are not supported.
(Supported on AP-90, and W-AP105 only. The configured value is adjusted based on AP
capabilities.)
Legacy stations Shows if the AP has enabled or disabled the legacy stations option, which controls
whether or not legacy (non-HT) stations are allowed to associate with the AP’s SSID. By
default, legacy stations are allowed to associate.
NOTE: This setting has no effect on a BSS in which HT support is not available.
Allow weak encryption Shows if the AP has enabled or disabled the weak encryption option.
The use of TKIP or WEP for unicast traffic forces the use of legacy transmissions rates.
Disabling this mode prevents the association of stations using TKIP or WEP for unicast
traffic. This mode is disabled by default.
Virtual AP enable Wireless LAN profiles configure WLANs in the form of virtual AP profiles. This parameter
shows if the AP has enabled or disabled virtual APs.
Allowed band Shows the band(s) on which to use the virtual AP:
 a—802.11a band only (5 GHz)
 g—802.11b/g band only (2.4 GHz)
 all—both 802.11a and 802.11b/g bands (5 GHz and 2.4 GHz)
VLAN Shows the VLAN(s) into which users are placed in order to obtain an IP address.
Forward mode Shows the current forward mode (tunnel, bridge, split-tunnel, or decrypt-tunnel) for the
virtual AP.
This parameter controls whether 802.11 frames are tunneled to the controller using
generic routing encapsulation (GRE), bridged into the local Ethernet LAN (for remote
APs), or a combination thereof depending on the destination (corporate traffic goes to the
controller, and Internet access remains local).
When an AP is configured to use the decrypt-tunnel forwarding mode, that AP decrypts
and decapsulates all 802.11 frames from a client and sends the 802.3 frames through the
GRE tunnel to the controller, which then applies firewall policies to the user traffic. When
the controller sends traffic to a client, the controller sends 802.3 traffic through the GRE
tunnel to the AP, which then converts it to encrypted 802.11 and forwards to the client.
Only 802.1x authentication is supported when configuring bridge or split tunnel mode.
Deny time range Shows the time range for which the AP will deny access for a virtual AP.
Mobile IP Shows if IP mobility has been enabled or disabled for the virtual AP.
HA Discovery on-
association
If enabled, all clients of a virtual-ap will received mobility service on association.
DoS Prevention Shows the status of the Dos Prevention option. If enabled, virtual APs ignore
deauthentication frames from clients. This prevents a successful deauth attack from
being carried out against the AP. This does not affect third-party APs.
Station Blacklisting Shows if the virtual AP has enabled or disabled detection of denial of service (DoS)
attacks, such as ping or SYN floods, that are not spoofed deauth attacks.
Blacklist Time Shows the number of seconds that a client is quarantined from the network after being
blacklisted.
Authentication Failure
Blacklist Time
Shows the time, in seconds, a client is blocked if it fails repeated authentication. If the
virtual AP shows a value of 0, a blacklisted client is blocked indefinitely.
Fast Roaming Shows if the AP has enabled or disabled fast roaming.
Strict Compliance If enabled, the virtual AP denies client association requests if the AP and client station
have no common rates defined. Some legacy client stations which are not fully 802.11-
compliant may not include their configured rates in their association requests. Such non-
compliant stations may have difficulty associating with APs unless strict compliance is
disabled.
Parameter Description