5 - 166 WiNG 5.6 Access Point System Reference Guide
Bonjour Forwarding Policy enables discovery of services on VLANs which are not visible to the device running the Bonjour
Gateway. Bonjour forwarding enables forwarding of Bonjour advertisements across VLANs to enable the Bonjour Gateway
device to build a list of services and the VLANs where these services are available.
7. Select OK to save the changes made to the profile’s services configuration. Select Reset to revert to the last saved
configuration.
5.2.10.1 Profile Services Configuration and Deployment Considerations
Profile Services Configuration
Before defining a profile’s captive portal and DHCP configuration, refer to the following deployment guidelines to ensure the
profile configuration is optimally effective:
• A profile plan should consider the number of wireless clients allowed on the profile’s guest (captive portal) network and the
services provided, or if the profile should support guest access at all.
• Profile configurations supporting a captive portal should include firewall policies to ensure logical separation is provided
between guest and internal networks so internal networks and hosts are not reachable from guest devices.
• DHCP’s lack of an authentication mechanism means a DHCP server supported profile cannot check if a client or user is
authorized to use a given user class. This introduces a vulnerability when using user class options. Ensure a profile using
DHCP resources is also provisioned with a strong user authorization and validation configuration.
To Next Page
Loading...
