Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide 155 | Instant Firewall
Chapter 14
Instant Firewall
A firewall is a system designed to prevent unauthorized Internet users from accessing a private
network connected to the Internet. It defines access rules and monitors all data entering or leaving
the network and blocks data that does not satisfy the specified security policies.
DellW-Instant implements a W-Instant Firewall feature that uses a simplified firewall policy
language. An administrator can define the firewall policies on an SSID or wireless LAN such as the
Guest network or an Employee network. At the end of the authentication process, these policies
are uniformly applied to users connected to that network. The W-Instant Firewall gives you the
flexibility to limit packets or bandwidth available to a particular class of users. Instant Firewall
manages packets according to the first rule the packet matches.
1. In the Networks tab, click the New link. The New WLAN window appears.
2. Navigate to Access tab to specify the access rules for the network.
3. Slide to Network-based using the scroll bar and click New to add a new rule.
The New Rule window consists of the following options:
l Rule type— Select the rule type (Access control, VLAN assignment) from the drop-down list.
NOTE: This release of W-Instant supports configuration of up to 64 access control rules.
l Action— Select Allow, Deny, or Destination-NAT from the drop-down list to allow or deny
traffic with the specified service type and destination.
l Log— Select this check box if you want a log entry to be created when this rule is triggered.
Instant firewall supports firewall based logging function. Firewall logs on W-IAP are generated
as syslog messages.
l Blacklist— Select this check box if you want the client to be blacklisted when this rule is
triggered. The blacklisting lasts for the duration specified as Auth failure blacklist time on the
Blacklisting tab of the PEF window. See "Client Blacklisting" on page 255 for more
information.
l Classify media— Select this check box if you want to prioritize video and voice traffic. When
enabled, deep packet inspection is performed on all non-NATed traffic, and the traffic is
marked as follows:
l Video: Priority 5 (Critical)
l Voice: Priority 6 (Internetwork Control)
l Disable scanning— Select this check box if you want ARM scanning to be paused when this
rule is triggered, to optimize performance.
NOTE: This feature only takes effect if ARM scanning is enabled, from the ARM tab of the RF
dialog.
To Next Page
Loading...
Need help?
General
