Device Configuration 5 - 111
11. Define the following Layer 2 Firewall parameters:
12. Set the following IPv6 Settings:
13. Refer to the Captive Portal field to select an existing captive portal configuration to apply access restrictions to the bridge
VLAN configuration.
A captive portal is an access policy for providing temporary and restrictive access using a standard Web browser. Captive
portals provides authenticated access by capturing and re-directing a wireless user's Web browser session to a captive
portal login page where the user must enter valid credentials to access to the network. Once logged into the captive portal,
additional Terms and Agreement, Welcome, Fail and No Service pages provide the administrator with a number of options
on captive portal screen flow and user appearance.
If an existing captive portal does not suite the bridge VLAN configuration, either select the Edit icon to modify an existing
configuration or select the Create icon to define a new configuration that can be applied to the bridge VLAN. For
information on configuring a captive portal policy, see Configuring Captive Portal Policies on page 9-2.
14. Select the IGMP Snooping tab.
Trust ARP Response Select this option to use trusted ARP packets to update the DHCP Snoop Table to
prevent IP spoof and arp-cache poisoning attacks. This feature is disabled by default.
Trust DHCP Responses Select this option to use DHCP packets from a DHCP server as trusted and permissible
within the network. DHCP packets update the DHCP Snoop Table to prevent IP spoof
attacks. This feature is disabled by default.
Enable Edge VLAN Mode Select this option to enable edge VLAN mode. When selected, the IP address in the
VLAN is not used for normal operations, as its now designated to isolate devices and
prevent connectivity. This feature is enabled by default.
IPv6 Firewall Select this option to enable IPv6 on this bridge VLAN. This setting is enabled by default.
DHCPv6 Trust Select this option to enable the trust all DHCPv6 responses on this bridge VLAN.
DHCPv6 is a networking protocol for configuring IPv6 hosts with IP addresses, IP
prefixes or other configuration attributes required on an IPv6 network. This setting is
enabled by default.
RA Guard Select this option to enable router advertisements or ICMPv6 redirects on this bridge
VLAN. This setting is enabled by default.