
Device Configuration 5 - 27
Use the
IPv6 Inbound Firewall Rules
drop-down menu to select the IPv6 specific firewall rules to apply to this profile’s
Ethernet port configuration. IPv6 is the latest revision of the
Internet Protocol
(IP) designed to replace IPv4. IPV6 provides
enhanced identification and location information for computers on networks routing traffic across the Internet. IPv6
addresses are composed of eight groups of four hexadecimal digits separated by colons.
The firewall inspects IP and MAC traffic flows and detects attacks typically not visible to traditional wired firewall
appliances.
15. If a firewall rule does not exist suiting the data protection needs of the target port configuration, select the
Create
icon to
define a new rule configuration.
16. Refer to the
Trust
field to define the following:
17. Set the following
IPv6 Settings
:
18. Set the following
802.1X Settings
:
Trust ARP Responses
Select this option to enable ARP trust on this access point port. ARP packets received
on this port are considered trusted and information from these packets is used to
identify rogue devices within the network. The default value is disabled.
Trust DHCP Responses
Select this option to enable DHCP trust on this port. If enabled, only DHCP responses
are trusted and forwarded on this port, and a DHCP server can be connected only to a
DHCP trusted port. The default value is enabled.
ARP header Mismatch
Validation
Select this option to enable a mismatch check for the source MAC in both the ARP and
Ethernet header. The default value is disabled.
Trust 8021p COS values
Select this option to enable 802.1p COS values on this port. The default value is
enabled.
Trust IP DSCP
Select this option to enable IP DSCP values on this port. The default value is enabled.
NOTE:
Some vendor solutions with VRRP enabled send ARP packets with Ethernet
SMAC as a physical MAC and inner ARP SMAC as VRRP MAC. If this configuration is
enabled, a packet is allowed, despite a conflict existing.
Trust ND Requests
Select this option to enable the trust of neighbor discovery requests required on an IPv6
network on this Ethernet port. This setting is disabled by default.
Trust DHCPv6
Responses
Select this option to enable the trust all DHCPv6 responses on this Ethernet port. DHCPv6
is a networking protocol for configuring IPv6 hosts with IP addresses, IP prefixes or other
configuration attributes required on an IPv6 network. This setting is enabled by default.
ND Header Mismatch
Validation
Select this option to enable a mismatch check for the source MAC within the ND header
and Link Layer Option. This setting is disabled by default.
RA Guard
Select this option to enable router advertisements or ICMPv6 redirects from this Ethernet
port. This setting is disabled by default.
Host Mode
Use the drop-down menu to select the host mode configuration to apply to this port. Options
include
single-host
or
multi-host
. The default setting is single-host.
Guest VLAN
Specify a guest VLAN for this port from 1 - 4094. This is the VLAN traffic is bridged on if this
port is unauthorized and the guest VLAN is globally enabled.
Summary of Contents for WiNG 5.6
Page 1: ...Motorola Solutions WiNG 5 6 ACCESS POINT SYSTEM REFERENCE GUIDE ...
Page 2: ......
Page 22: ...8 WiNG 5 6 Access Point System Reference Guide ...
Page 26: ...1 4 WiNG 5 6 Access Point System Reference Guide ...
Page 38: ...2 12 WiNG 5 6 Access Point System Reference Guide ...
Page 74: ...3 36 WiNG 5 6 Access Point System Reference Guide ...
Page 468: ...6 2 WiNG 5 6 Access Point System Reference Guide Figure 6 1 Configuration Wireless menu ...
Page 568: ...6 102 WiNG 5 6 Access Point System Reference Guide ...
Page 614: ...7 46 WiNG 5 6 Access Point System Reference Guide ...
Page 660: ...8 46 WiNG 5 6 Access Point System Reference Guide ...
Page 716: ...9 56 WiNG 5 6 Access Point System Reference Guide ...
Page 730: ...10 14 WiNG 5 6 Access Point System Reference Guide ...
Page 982: ...14 20 WiNG 5 6 Access Point System Reference Guide ...
Page 984: ...A 2 WiNG 5 6 Access Point System Reference Guide ...
Page 1046: ...B 62 WiNG 5 6 Access Point System Reference Guide ...
Page 1047: ......