Aruba Networks AirOS v2.3, User Manual

Page: 67 / 254

Configuring Firewall Roles and Policies 57
Chapter 5
5. Log Optional This field indicates if any
match of this rule should be
logged. Select this option if it is required to
log a match to this rule. It is
recommended to use this option
when a rule indicates a security
breach such as a data packet on a
policy that is meant only to be used
for voice calls.
Mirror Optional
6. Queue Optional This field indicates the
queue in which a packet
matching this rule should
be placed. Select the high priority queue for
higher priority data such as voice and
low priority queue for the type of
traffic that may be lower in priority.
7. Time Range Optional
8. Black List Optional This field indicates that a
client that is the source or
destination of traffic that
matches the rule should be
automatically blacklisted. Select this option if it is required to
auto-blacklist a client that is involved
in a traffic session matching this rule.
This option is recommended for
rules that indicate a security breach
and the blacklisting option can be
used to prevent access to clients that
are attempting to breach the security.
9.
ToS Optional This field indicates the ToS
bits in the IP header that
should be marked for
packets matching the rule. Value of ToS bits to be marked in the
packet when it leaves the switch if it
matches the rule.
10. 802.1p Priority Optional This field indicates the
802.1p priority bits that
should be marked for
frames matching this rule. Value of 802.1p priority to be marked
in the frame when it leaves the switch
if it matches the rule.