Concept Guide

To view the ALG configuration:
(Instant AP)# show alg
Current ALG
-----------
ALG Status
--- ------
sccp Disabled
sip Enabled
ua Enabled
vocera Enabled
Configuring Firewall Settings for Protection from ARP Attacks
You can configure firewall settings to protect the network against attacks using the Instant UI or CLI.
In the Instant UI
To configure firewall settings:
1. Click the Security link at the top right corner of Instant main window.
2. Clickthe Firewall Settings tab. The Firewall Settings tab contents are displayed.
3. To configure protection against security attacks, select the following checkboxes:
l Select Drop bad ARP to enable the W-IAP to drop the fake ARP packets.
l Select Fix malformed DHCP to the W-IAP to fix the malformed DHCP packets.
l Select ARP poison check to enable the W-IAP to trigger an alert notifying the user about the ARP
poisoning that may have been caused by the rogue APs.
Figure 42 Firewall Settings —Protection Against Wired Attacks
4. Click OK.
In the CLI
To configure firewall settings to prevent attacks
(Instant AP)(config)# attack
(Instant AP)(ATTACK)# drop-bad-arp-enable
(Instant AP)(ATTACK)# fix-dhcp-enable
(Instant AP)(ATTACK)# poison-check-enable
(Instant AP)(ATTACK)# end
(Instant AP)# commit apply
To view the configuration status:
(Instant AP)# show attack config
Current Attack
--------------
Attack Status
------ ------
drop-bad-arp Enabled
fix-dhcp Enabled
poison-check Enabled
Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 195