You should not enable this option unless instructed to do so by an Aruba representative.ĭetects and prohibits arp spoofing. You should not enable this option unless instructed to do so by an Aruba representative.Īdds only IP addresses, which belong to a local subnet, to the user-table. You can enable this option if there are no mobile clients on the network.Ĭreates a unique state for each PPTP tunnel. This option should be disabled when you have mobile clients on the network as enabling this option will cause mobility to fail. Prevents data from passing between two clients until the three-way TCP handshake has been performed. You should not enable this option unless instructed to do so by an Aruba representative, as doing so may create unnecessary overhead on the controller. If you enable this option, each packet in the session is logged. Normally, one event is logged per session. You should not enable this option unless instructed to do so by an Aruba representative.Įnables logging of every packet if logging is enabled for the corresponding session rule. When enabled, all IP fragments are dropped. This option should be enabled only when thee is no VoIP or VoWLAN traffic on the network. You should not enable this option unless instructed to do so by an Aruba representative.ĭisables monitoring of exchanges between a voice over IP or voice over WLAN device and a SIP server. Enabling this option prevents FTP transfers.Įnabling this option could cause APs to not boot up. This parameter does not depend on the deny-inter-user-bridging parameter being enabled or disabled.ĭisables the FTP server on the controller. This option can be used to prevent traffic, such as Appletalk or IPX, from being forwarded.ĭenies traffic between untrusted users by disallowing layer2 and layer3 traffic.
You can configure user role policies that prevent Layer-3 traffic between users or networks but this does not block Layer-2 traffic. Prevents the forwarding of Layer-2 traffic between wired or wireless users. If enabled, the output will display the letter a in the flags column.Īpplies bw contracts to local subnet broadcast traffic
You can check the status of this option using the show ap active and the show datapath tunnel command. If enabled, all broadcast ARP requests are converted to unicast and sent directly to the client. Sets rates which, if exceeded, can indicate a denial of service attack. This option is typically used for captive portal configuration. This option should be enabled when the controller is not the default gateway for wireless clients and the default gateway is behind the controller. This command configures firewall options on the controller.Īllows three-way session when performing destination NAT.
0 kommentar(er)
