Table of Contents
Advertisement
Parameter
VLAN
Forward mode
Deny time range
Mobile IP
HA Discovery on-association
DoS Prevention
Station Blacklisting
Blacklist Time
Authentication Failure Blacklist Time
704 | show ap config
Description
all—both 802.11a and 802.11b/g bands (5 GHz and 2.4
l
GHz)
Shows the VLAN(s) into which users are placed in order to
obtain an IP address.
Shows the current forward mode (tunnel, bridge, split-
tunnel, or decrypt-tunnel) for the virtual AP.
This parameter controls whether 802.11 frames are tunneled
to the controller using generic routing encapsulation (GRE),
bridged into the local Ethernet LAN (for remote APs), or a
combination thereof depending on the destination
(corporate traffic goes to the controller, and Internet access
remains local).
When an AP is configured to use the decrypt-tunnel
forwarding mode, that AP decrypts and decapsulates all
802.11 frames from a client and sends the 802.3 frames
through the GRE tunnel to the controller, which then applies
firewall policies to the user traffic. When the controller
sends traffic to a client, the controller sends 802.3 traffic
through the GRE tunnel to the AP, which then converts it to
encrypted 802.11 and forwards to the client.
Only 802.1X authentication is supported when configuring
bridge or split tunnel mode.
Shows the time range for which the AP will deny access for
a virtual AP.
Shows if IP mobility has been enabled or disabled for the
virtual AP.
If enabled, home agent discovery is triggered on client
association instead of home agent discovery based on
traffic from client. Mobility on association can speed up
roaming and improve connectivity for clients that do not
send many uplink packets to trigger mobility (VoIP
clients).Best practices is to keep this parameter disabled,r
as it increases IP mobility control traffic between
controllers in the same mobility domain. Enable this
parameter only when voice issues are observed in VoIP
clients.
NOTE: ha-disc-onassoc parameter works only when IP
mobility is enabled and configured on the controller.
Shows the status of the Dos Prevention option. If enabled,
virtual APs ignore deauthentication frames from clients.
This prevents a successful deauth attack from being carried
out against the AP. This does not affect third-party APs.
Shows if the virtual AP has enabled or disabled detection of
denial of service (DoS) attacks, such as ping or SYN floods,
that are not spoofed deauth attacks.
Shows the number of seconds that a client will be
quarantined from the network after being blacklisted.
Shows the time, in seconds, a client is blocked if it fails
repeated authentication. If the virtual AP shows a value of 0,
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Advertisement
Table of Contents
