Motorola WiNG 5.4.2, Справочное руководство системы

Страница: 385 / 836

6 - 29
20. Set a Firewall Session Hold Time in either Seconds (1 - 300) or Minutes (1 - 5). This is the hold time for caching user
credentials and Firewall state information when a client roams. The default setting is 30 seconds.
21. Set the following HTTP Analysis Forward to Syslog Server configuration:
22. Set the following Filter configuration for filtering out specific contents from the information sent to a remote syslog server
for HTTP analysis:
23. Select OK when completed to update this WLAN’s Firewall settings. Select Reset to revert the screen back to its last saved
configuration.
WLAN Firewall Deployment Considerations
Before defining an access control configuration on a WLAN, refer to the following deployment guideline to ensure the
configuration is optimally effective:
• IP and non-IP traffic on the same Layer 2 interface can be filtered by applying both an IP ACL and a MAC ACL to the interface.
Action If enabling a wireless client threshold, use the drop-down menu to determine whether
clients are
deauthenticated when the threshold is exceeded, or blacklisted from
connectivity for a user-defined interval. Selecting None applies no consequence to an
exceeded threshold.
Blacklist Duration Select this check box and define a setting from 0 - 86,400 seconds. Offending clients can
reauthenticate, once this blacklist duration has been exceeded.
Enable Select this option to forward logging messages to an external Syslog server.
Host Use the field to provide a hostname/IP address of the remote Syslog server. Use the drop-
down to select the type of host address.
Port Use the spinner control to configure the port on which the external Syslog server can be
reached.
Proxy Mode Use the drop-down to select the proxy configuration.
Filter Out Images Select this option to filter out images from the information logged to the remote syslog
server.
Strip Query String Select this option to strip the query string in the information logged to the remote syslog
server.