Reference Guide

228 | firewall Dell PowerConnect ArubaOS 5.0 Command Line Interface | Reference Guide
Usage Guidelines
This command configures global firewall options on the controller.
Example
The following command disallows forwarding of non-IP frames between users:
firewall deny-inter-user-bridging
Related Commands
(host) (config) #show firewall
Command History
Command Information
session-mirror-ipsec Configures session mirroring of all frames that are processed
by IPsec. Frames are sent to IP address specified by the
session-mirror-destination option.This option is used only for
troubleshooting or debugging.
—disabled
session-voip-timeout Idle session timeout, in seconds, for sessions that are marked
as voice sessions. If no voice packet exchange occurs over a
voice session for the specified time, the voice session is
removed.
16-300 300
seconds
broadcast-filter-arp
If enabled, all broadcast ARP requests are converted to
unicast and sent directly to the client. You can check the
status of this option using the show ap active and the show
datapath tunnel command. If enabled, the output will display
the letter a in the flags column.
—disabled
wmm-voip-content-
enforcement
If traffic to or from the user is inconsistent with the associated
QoS policy for voice, the traffic is reclassified to best effort
and data path counters incremented.
This parameter requires the PEFNG license.
—disabled
Version Modification
ArubaOS 3.0 Command introduced.
ArubaOS 3.2 The wmm-voip-content-enforcement parameter was introduced.
ArubaOS 3.3 The session-mirror-destination parameter was modified.
ArubaOS 3.3.2 The local-valid-users parameter was added.
ArubaOS 3.4 The voip-proxy-arp parameter was renamed to broadcast-filter-arp and it does not require a
Voice license.
The prohibit-arp-spoofing parameter was added.
Platform License Command Mode
Available on all platforms This command requires the
PEFNG license
Config mode on master controllers
Parameter Description Range Default