Alcatel-Lucent IAP93 Betriebsanweisung PDF herunterladen (Seite 166)

Configuring Firewall Settings for Protection from ARP Attacks

You can configure firewall settings to protect the network against attacks using AOS-W Instant using AOS-W

Instant UI or CLI.

In the AOS-W Instant UI

To configure firewall settings:

1. Click the Security link at the top right corner of AOS-W Instant main window.

2. Clickthe Firewall Settings tab. The Firewall Settings tab contents are displayed.

3. To configure protection against security attacks, select the following check boxes:

l Select Drop bad ARP to enable the OAW-IAP to drop the fake ARP packets.

l Select Fix malformed DHCP to the OAW-IAP to fix the malformed DHCP packets.

l Select ARP poison check to enable the OAW-IAP to trigger an alert notifying the user about the ARP

poisoning that may have been caused by the rogue APs.

Figure 56 Firewall Settings —Protection Against Wired Attacks

4. Click OK.

In the CLI

To configure firewall settings to prevent attacks

(Instant Access Point)(config)# attack

(Instant Access Point)(ATTACK)# drop-bad-arp-enable

(Instant Access Point)(ATTACK)# fix-dhcp-enable

(Instant Access Point)(ATTACK)# poison-check-enable

(Instant Access Point)(ATTACK)# end

(Instant Access Point)# commit apply

To view the configuration status:

(Instant Access Point)# show attack config

Current Attack

--------------

Attack Status

------ ------

drop-bad-arp Enabled

AOS-W Instant 6.3.1.1-4.0 | User Guide Roles and Policies | 166

1 2 ... 161 162 163 164 165 166 167 168 169 170 171 ... 334 335

Keine Kommentare

Alcatel-Lucent IAP93 Betriebsanweisung Seite 166