Filtering At The Interface Level - Extreme Networks Summit WM User Manual

4 In the Port Status drop-down list, click Enabled to enable OSPF on the port. The default setting is
Disabled.
5 In the Link Cost box, type the OSPF standard for your network for this port. This is the cost of
sending a data packet on the interface. The lower the cost, the more likely the interface is to be used
to forward data traffic. The default setting is 10 for WM100/WM1000.
NOTE
If more than one port is enabled for OSPF, it is important to prevent the Summit WM Controller from serving as
a router for other network traffic (other than the traffic from wireless device users controlled by the Summit WM
Controller). To ensure that the Summit WM Controller is never the preferred OSPF route, set the Link Cost to its
maximum value of 65535. Filters should also be defined that will drop routed packets. For more information,
see "Configuring filtering rules for a WM-AD" on page
6 In the Authentication drop-down list, click the authentication type for OSPF on your network: None
or Password. The default setting is None.
7 If Password is selected as the authentication type, in the Password box, type the password. If None
is selected as the Authentication type, leave this box empty. This password must match on either end
of the OSPF connection.
8 Type the following:
Hello-Interval - Specifies the time in seconds (displays OSPF default).The default setting is 10
seconds.
Dead-Interval - Specifies the time in seconds (displays OSPF default). The default setting is 40
seconds.
Retransmit-Interval - Specifies the time in seconds (displays OSPF default). The default setting is
5 seconds.
Transmit Delay - Specifies the time in seconds (displays OSPF default). The default setting is 1
second.
9 To save your changes, click Save.
To confirm that ports are set for OSPF:
1 To confirm that the ports are set up for OSPF, and that advertised routes from the upstream router
are recognized, click View Forwarding Table. The Forwarding Table is displayed.
The following additional reports display OSPF information when the protocol is in operation:
OSPF Neighbor - Displays the current neighbors for OSPF (routers that have interfaces to a
common network)
OSPF Linkstate - Displays the Link State Advertisements (LSAs) received by the currently
running OSPF process. The LSAs describe the local state of a router or network, including the
state of the router's interfaces and adjacencies.
2 To update the display, click Refresh.

Filtering at the interface level

The Summit WM solution has a number of built-in filters that protect the system from unauthorized
traffic. These filters are specific only to the Summit WM Controller. These filters are applied at the
network interface level and are automatically invoked. By default, these filters provide stringent-level
rules to allow only access to the system's externally visible services. In addition to these built-in filters,
Summit WM User Guide, Software Version 5.3
181.
47