Extreme Networks Altitude 4000 Series, Справочное руководство, Страница: 296 / 521

Chapter 8: Security Configuration
Altitude
TM
4000 Series Access Point System Reference Guide
296
Rules comprise conditions and actions. A condition describes a packet traffic stream. Define constraints
on the source and destination device, the service (for example, protocols and ports), and the incoming
interface. An action describes what should occur to packets matching set conditions. For example, if the
packet stream meets all conditions, traffic is permitted, authenticated and sent to the destination device.
Additionally, IP and MAC rule based Firewall filtering can be deployed to apply Firewall policies to
traffic being bridged by radios. IP and MAC filtering can be employed to permit or restrict traffic
exchanged between hosts, hosts residing on separate WLANs or hosts forwarding traffic to wired
devices.
For more information, refer to the following:
●
Defining a Firewall Configuration on page 296
●
Configuring IP Firewall Rules on page 304
●
Configuring MAC Firewall Rules on page 307
Defining a Firewall Configuration
“Wireless Firewall”
To configure a Firewall:
1 Select Configuration > Security > Wireless Firewall to display existing Firewall policies.
The Wireless Firewall screen lists Denial of Service , Storm Control and Advanced Setting tabs used to
create the single Firewall policy used by the access point and its connected devices. The Denial of
Service tab displays be default.
A denial of service (DoS) attack is an attempt to make a computer or network resource unavailable to
its intended users. Although the means to carry out a DoS attack will vary, it generally consists of a