Wireless Access

last person joined: 6 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Missing broadcast-filter arp checkbox, is it already enabled?

This thread has been viewed 1 times
  • 1.  Missing broadcast-filter arp checkbox, is it already enabled?

    Posted Apr 04, 2016 03:34 PM

    I'm getting ready to enable the "Drop Broadcast and Unknown Multicast" knob on a single VAP profile for testing purposes.  After reading about this, it sounds like ARP broadcasts could be dropped, but only if the "Broadcast-filter ARP" knob is disabled.  Unfortunately, it appears that there isn't even a checkbox for this knob!

    filter-arp.PNG

    Some other posts indicate that this knob is actually under the VAP profile in the guise of "Convert Broadcast ARP requests to unicast", which I already have enabled.  My concern is that the web UI seems to indicate in two places what may be the same thing.

     

    So, what is the correct way to enable Broadcast-filter ARP? I have also logged on to the CLI and issued 

    show run | inc broadcast
    show run | inc filter
    show run | inc arp
    show configuration | inc broadcast
    show configuration | inc filter
    show configuration | inc arp

    But none of those returns any results pertaining to Broadcast-filter ARP.



  • 2.  RE: Missing broadcast-filter arp checkbox, is it already enabled?

    EMPLOYEE
    Posted Apr 04, 2016 03:35 PM

    It is on by default, so it would not show up in the configuration.

     

    Try this:

     

    show wlan virtual-ap <name of virtual ap>

     



  • 3.  RE: Missing broadcast-filter arp checkbox, is it already enabled?

    Posted Apr 04, 2016 03:38 PM

    Hey Colin,

     

    Thanks for the quick reply as always.  Much appreciated :)

     

    Here is the output:

     

    (sea-aruba-02) #show wlan virtual-ap Awesome-vap_prof

    Virtual AP profile "Awesome-vap_prof" (Invalid: VLAN 224 does not exist)
    ------------------------------------------------------------------------
    Parameter Value
    --------- -----
    AAA Profile Awesome-aaa_prof
    802.11K Profile default
    Hotspot 2.0 Profile N/A
    SSID Profile Awesome-ssid_prof
    Virtual AP enable Enabled
    VLAN 224
    Forward mode tunnel
    Allowed band all
    Band Steering Disabled
    Steering Mode prefer-5ghz
    Dynamic Multicast Optimization (DMO) Disabled
    Dynamic Multicast Optimization (DMO) Threshold 6
    Drop Broadcast and Unknown Multicast Disabled
    Convert Broadcast ARP requests to unicast Enabled
    Authentication Failure Blacklist Time 3600 sec
    Blacklist Time 3600 sec
    Deny inter user traffic Disabled
    Deny time range N/A
    DoS Prevention Disabled
    HA Discovery on-association Enabled
    Mobile IP Enabled
    Preserve Client VLAN Disabled
    Remote-AP Operation standard
    Station Blacklisting Enabled
    Strict Compliance Disabled
    VLAN Mobility Disabled
    FDB Update on Assoc Disabled
    WMM Traffic Management Profile N/A

     

    Is it the "Convert Broadcast ARP requests to unicast" section?



  • 4.  RE: Missing broadcast-filter arp checkbox, is it already enabled?
    Best Answer

    EMPLOYEE
    Posted Apr 04, 2016 03:48 PM

    Convert Broadcast ARP requests to unicast Enabled

     

    is broadcast filter ARP.