Device Configuration 5 - 311
13. Set or override the following Layer 2 Firewall parameters:
14. Set the following IPv6 Settings:
15. Refer to the Captive Portal field to select an existing captive portal configuration to apply access restrictions to the bridge
VLAN configuration.
A captive portal is an access policy for providing temporary and restrictive access using a standard Web browser. Captive
portals provides authenticated access by capturing and re-directing a wireless user's Web browser session to a captive
portal login page where the user must enter valid credentials to access to the network. Once logged into the captive portal,
additional Terms and Agreement, Welcome, Fail and No Service pages provide the administrator with a number of options
on captive portal screen flow and user appearance.
If an existing captive portal does not suite the bridge VLAN configuration, either select the Edit icon to modify an existing
configuration or select the Create icon to define a new configuration that can be applied to the bridge VLAN. For
information on configuring a captive portal policy, see Configuring Captive Portal Policies on page 9-2.
16. Click the IGMP Snooping tab to set or override the IGMP snooping configuration.
Trust ARP Responses Select this option to use trusted ARP packets to update the DHCP snoop table to prevent
IP spoof and arp-cache poisoning attacks. This feature is disabled by default.
Trust DHCP Responses Select this option to use DHCP packets from a DHCP server as trusted and permissible
within the network. DHCP packets are used to update the DHCP snoop table to prevent
IP spoof attacks. This feature is disabled by default.
Edge VLAN Mode Select this option to enable edge VLAN mode. When selected, the IP address in the
VLAN is not used for normal operations, as its now designated to isolate devices and
prevent connectivity. This feature is enabled by default.
IPv6 Firewall Select this option to enable IPv6 on this bridge VLAN. This setting is enabled by default.
DHCPv6 Trust Select this option to enable the trust all DHCPv6 responses on this bridge VLAN. DHCPv6
is a networking protocol for configuring IPv6 hosts with IP addresses, IP prefixes or other
configuration attributes required on an IPv6 network. This setting is enabled by default.
RA Guard Select this option to enable router advertisements or ICMPv6 redirects on this bridge
VLAN. This setting is enabled by default.
To Next Page
Loading...
