Release Notes
1875 | show wlan virtual-ap Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
Parameter Description
If the global setting to deny inter-user traffic is
enabled, all inter-user traffic between clients will be
denied, regardless of the settings configured in the
virtual AP profiles. If the setting to deny inter-user
traffic is disabled globally but enabled on an individual
virtual ap, only the traffic between un-trusted users
and the clients on that particular virtual AP will be
blocked.
Deny time range
Time range for which the AP will deny access.
DoS Prevention
If enabled, APs ignore deauthentication frames from
clients. This prevents a successful deauth attack from
being carried out against the AP. This does not affect
third-party APs.
HA Discovery on-association If enabled, home agent discovery is triggered on client
association instead of home agent discovery based on
traffic from client. Mobility on association can speed
up roaming and improve connectivity for clients that
do not send many uplink packets to trigger mobility
(VoIP clients). Best practices is to leave this parameter
disabled as it increases IP mobility control traffic
between controllers in the same mobility domain.
Enable this parameter only when voice issues are
observed in VoIP clients.
NOTE: ha-disc-onassoc parameter works only when
IP mobility is enabled and configured on the controller.
Mobile IP Shows if the profile has enabled or disabled IP mobility.
Preserve Client VLAN
This parameter allows clients to retain their previous
VLAN assignment if the client disassociates from an AP
and then immediately re-associates either with same AP
or another AP on same controller.
Remote-AP Operation
Shows how the virtual AP operates on a remote AP:
l always: Permanently enables the virtual AP.
l backup: Enables the virtual AP if the remote AP
cannot connect to the controller.
l persistent: Permanently enables the virtual AP
after the remote AP initially connects to the
controller.
l standard: Enables the virtual AP when the remote
AP connects to the controller.
Station Blacklisting
Shows if the profile has enabled or disabled detection
of denial of service (DoS) attacks, such as ping or SYN
floods, that are not spoofed deauth attacks.
Strict Compliance
If enabled, the AP denies client association requests if
the AP and client station have no common rates
defined. Some legacy client stations which are not fully
802.11-compliant may not include their configured
rates in their association requests. Such non-compliant
stations may have difficulty associating with APs
unless strict compliance is disabled.










