Device Configuration 5 - 37
Figure 5-21 Port Channels - Security tab
12. Refer to the Access Control field. As part of the port channel’s security configuration, Inbound IP and MAC address
firewall rules are required.
Use the Inbound IP Firewall Rules and Inbound MAC Firewall Rules drop-down menus to select firewall rules to
apply to this profile’s port channel configuration.
The firewall inspects IP and MAC traffic flows and detects attacks typically not visible to traditional wired firewall
appliances.
If a firewall rule does not exist suiting the data protection needs of the target port channel configuration, select the Create
icon to define a new rule configuration or the Edit icon to modify an existing firewall rule configuration. For more
information, see Wireless Firewall on page 8-2.
13. Refer to the Trust field to define the following:
Trust ARP Responses Select this option to enable ARP trust on this port channel. ARP packets received on this
port are considered trusted and information from these packets is used to identify rogue
devices within the managed network. The default value is disabled.
Trust DHCP Responses Select this option to enable DHCP trust. If enabled, only DHCP responses are trusted
and forwarded on this port channel, and a DHCP server can be connected only to a
DHCP trusted port. The default value is enabled.
ARP header Mismatch
Validation
Select this option to enable a mismatch check for the source MAC in both the ARP and
Ethernet header. The default value is enabled.
Trust 802.1p COS values Select this option to enable 802.1p COS values on this port channel. The default value
is enabled.
Trust IP DSCP Select this option to enable IP DSCP values on this port channel. The default value is
enabled.
To Next Page
Loading...
