Motorola Solutions WiNG 5.2.6, Справочное руководство

Страница: 372 / 670

7 - 12 WiNG 5.2.6 Access Point System Reference Guide
18.Refer to the Firewall Enhanced Logging field to set the following parameters:
19.Select the Enable Stateful DHCP Checks radio button to enable the stateful checks of DHCP packet traffic
through the Firewall. The default setting is enabled. When enabled, all DHCP traffic flows are inspected.
20.Define Flow Timeout intervals for the following flow types impacting the Firewall:
TFTP ALG Check the Enable box to allow TFTP traffic through the Firewall using its
default ports. This feature is enabled by default.
SIP ALG Check the Enable box to allow SIP traffic through the Firewall using its
default ports. This feature is enabled by default.
Log Dropped ICMP
Packets Use the drop-down menu to define how dropped ICMP packets are logged.
Logging can be rate limited for one log instance every 20 seconds. Options
include
Rate Limited , All or None . The default setting is None.
Log Dropped
Malformed Packets Use the drop-down menu to define how dropped malformed packets are
logged. Logging can be rate limited for one log instance every 20 seconds.
Options include
Rate Limited , All or None . The default setting is None.
Enable Verbose
Logging Select this option to enable verbose logging for dropped packets. This
setting is disabled by default.
TCP Close Wait Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 30 seconds.
TCP Established Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 10,800 seconds.
TCP Reset Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 10 seconds.
TCP Setup Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 10 seconds.
Stateless TCP Flow Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 90 seconds.
Stateless FIN/RESET
Flow Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 10 seconds.
ICMP Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 30 seconds.
UDP Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 90 seconds.
Any Other Flow Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 300 seconds.