Wireless Configuration 6 - 31
20. Set the following Wireless Client Deny configuration:
21. Set a Firewall Session Hold Time in either Seconds (1 - 300) or Minutes (1 - 5). This is the hold time for caching user
credentials and Firewall state information when a client roams. The default setting is 30 seconds.
22. Select OK when completed to update this WLAN’s Firewall settings. Select Reset to revert the screen back to its last saved
configuration.
WLAN Firewall Deployment Considerations
Before defining an access control configuration on a WLAN, refer to the following deployment guideline to ensure the
configuration is optimally effective:
• IP and non-IP traffic on the same Layer 2 interface can be filtered by applying both an IP ACL and a MAC ACL to the interface.
Validate ARP Header
Mismatch
Select this radio button to check for a source MAC mismatch in the ARP header and
Ethernet header. This setting is enabled by default.
DHCP Trust Select this radio button to enable DHCP trust on this WLAN. This setting is disabled by
default.
Wireless Client Denied
Traffic Threshold
If enabled, any associated client, exceeding the thresholds configured for storm traffic, is
either deauthenticated or blacklisted depending on the selected action. The threshold
range is from 1- 1000000 packets per second. This feature is disabled by default.
Action If enabling a wireless client threshold, use the drop-down menu to determine whether
clients are deauthenticated when the threshold is exceeded, or blacklisted from
connectivity for a user-defined interval. Selecting None applies no consequence to an
exceeded threshold.
Blacklist Duration Select this option and define a setting from 0 - 86,400 seconds. Offending clients can
reauthenticate, once this blacklist duration has been exceeded.
To Next Page
Loading...
