Dell W-Series 304 Instant 6.5.1.0-4.3.1.0 CLI Reference Guide - Page 412

Parameter probe-request-rate-thresholds probe-response-rate-thresholds rts-rate-quiet-time rts-rate-threshold rts-rate-time-interval spoofed-deauth-blacklist tkip-replay-quiet-time Description Rate threshold for probe request frames. Range - Rate threshold for probe - response frames. Time to wait, in seconds, after detecting an RTS rate anomaly after which the check can be resumed. 60-360000 seconds Number of RTS control packets over the time interval that constitutes an anomaly. 0-100000 Time interval, in seconds, over which the packet count should be checked. 1-120 seconds Enables detection of a deauth attack initiated against a client associated to an AP. When such an attack is detected, the client is quarantined from the network to prevent a man-inthe-middle attack from being successful. true false Time to wait, in seconds, after detecting a TKIP replay attack after which the check can be resumed. 60-360000 seconds Default - - 900 second s 5000 5 second s false 900 second s Usage Guidelines DoS attacks are designed to prevent or inhibit legitimate clients from accessing the network. This includes blocking network access completely, degrading network service, and increasing processing load on clients and network equipment. Example The following command enables a detection in the DoS profile named "floor2": (host) (config) #ids dos-profile floor2 (host) (IDS Denial Of Service Profile "floor2") detect-ap-flood 412| ids dos-profile Dell Networking W-Series ArubaOS 6.5.x | Reference Guide