Configuring Ip Firewall Rules - Motorola Solutions WiNG 5.2.6 Reference Manual

21.Refer to the TCP Protocol Checks
Check TCP states
where a SYN packet
tears down the flow
Check unnecessary
resends of TCP
packets
Check Sequence
Number in ICMP
Unreachable error
packets
Check
Acknowledgment
Number in RST
packets
Check Sequence
Number in RST
packets
22.Select OK to update the Firewall Policy Advanced Settings. Select
Firewall policy can be invoked at any point in the configuration process by selecting
the upper, left-hand side, of the access point user interface.

7.1.2 Configuring IP Firewall Rules


Wireless Firewall
Access points use IP based Firewalls like Access Control Lists (ACLs) to filter/mark packets based on the IP address from
which they arrive, as opposed to filtering packets on Layer 2 ports.
IP based Firewall rules are specific to source and destination IP addresses and the unique rules and precedence orders
assigned. Both IP and non-IP traffic on the same Layer 2 interface can be filtered by applying an IP ACL.
NOTE: Once defined, a set of IP Firewall rules must be applied to an interface to be a
functional filtering tool.
To add or edit an IP based Firewall Rule policy:
1. Select Configuration
field to set the following parameters:
Select the checkbox to allow a SYN packet to delete an old flow in
TCP_FIN_FIN_STATE and TCP_CLOSED_STATE and create a new flow. The
default setting is enabled.
Select the checkbox to enable the checking of unnecessary resends of TCP
packets. The default setting is enabled.
Select the checkbox to enable sequence number checks in ICMP
unreachable error packets when an established TCP flow is aborted.The
default setting is enabled.
Select the checkbox to enable the checking of the acknowledgment
number in RST packets which aborts a TCP flow in the SYN state. The
default setting is enabled.
Select the checkbox to check the sequence number in RST packets which
abort an established TCP flow. The default setting is enabled.
> Security > IP Firewall Rules
Security Configuration 7 - 13
Reset to revert to the last saved configuration. The
Activate Firewall Policy
to display existing IP Firewall Rule policies.
from