Extreme Networks Altitude 4000 Series, Справочное руководство, Страница: 80 / 521

Chapter 6: Device Configuration
Altitude
TM
4000 Series Access Point System Reference Guide
80
12 Refer to the Access Control field. As part of the port channel’s security configuration, Inbound IP and
MAC address firewall rules are required.
Use the Inbound IP Firewall Rules and Inbound MAC Firewall Rules drop-down menus to select
firewall rules to apply to this profile’s port channel configuration.
The firewall inspects IP and MAC traffic flows and detects attacks typically not visible to traditional
wired firewall appliances.
If a firewall rule does not exist suiting the data protection needs of the target port channel
configuration, select the Create icon to define a new rule configuration or the Edit icon to modify an
existing firewall rule configuration.
13 Refer to the Trust field to define the following:
14 Select OK to save the changes to the security configuration. Select R eset to revert to the last saved
configuration.
15 Select the Spanning Tree tab.
Trust ARP Responses Select the check box to enable ARP trust on this port channel. ARP
packets received on this port are considered trusted and information from
these packets is used to identify rogue devices within the managed
network. The default value is disabled.
Trust DHCP Responses Select the check box to enable DHCP trust. If enabled, only DHCP
responses are trusted and forwarded on this port channel, and a DHCP
server can be connected only to a DHCP trusted port. The default value is
enabled.
ARP header Mismatch
Validation Select the check box to enable a mismatch check for the source MAC in
both the ARP and Ethernet header. The default value is enabled.
Trust 802.1p COS values Select the check box to enable 802.1p COS values on this port channel.
The default value is enabled.
Trust IP DSCP Select the check box to enable IP DSCP values on this port channel. The
default value is disabled.