03-14-2016 03:50 AM
You should ask Omnipeek why they think that is a "severe broadcast storm". That is not Aruba's product, unfortunately.
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
03-15-2016 08:24 PM
Omnipeek defines a sever broadcast store as "a sustained level of 'all stations broadcast' packets (the destination physical address consists of all 1s) has met or exceeded the threshold." The default threshold is 500 packets/sec with a sampling period of 3 seconds. This can be modified by right-clicking on a packet and selecting Expert EventFinder Settings. Expand Data Link, and you'll see Severe Broadcast Storm there.
In your controller, are your VAPs configured to "drop broadcast and unknown multicast" and "convert broadcast ARP requests to unicast"?
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.