Motorola AP-6511 Reference Manual page 259

IPMAC Conflict Select this option to log and act upon detected IPMAC conflicts. These
Enable occur when removing a device from the network and attaching another
using the same IP address.
IPMAC Conflict When enabled, use the drop-down menu to set the logging level (Error,
Logging Warning, Notification, Information or Debug) if an attack is detected. The
default setting is Warning.
IPMAC Conflict U
Options include Log Only, Drop Only or Log and Drop. The default setting is
Action
Log and Drop.
7. The Firewall policy allows traffic filtering at the application layer using the
Gateway (ALG) feature. The Application Layer Gateway provides filters for the following common
protocols:
FTP ALG
TFTP ALG
SIP ALG
DNS ALG
8. Refer to the Firewall Enhanced Logging
Log Dropped ICMP
Packets
Log Dropped
Malformed Packets
9. Select the Enable Stateful DHCP Checks
traffic through the Firewall. The default setting is enabled. When enabled, all DHCP traffic flows are
inspected.
10. Define Flow Timeout
TCP Close Wait
TCP Established
TCP Reset
TCP Setup
se the drop-down menu to set the action taken when an attack is detected.
Check the Enable box to allow FTP traffic through the Firewall using its
default ports. This feature is enabled by default.
Check the Enable box to allow TFTP traffic through the Firewall using its
default ports. This feature is enabled by default.
Check the Enable box to allow SIP traffic through the Firewall using its
default ports. This feature is enabled by default.
Check the Enable box to allow DNS traffic through the Firewall using its
default ports. This feature is enabled by default.
field to set the following parameters:
Use the drop-down menu to define how dropped ICMP packets are logged.
Logging can be rate limited for one log instance every 20 seconds. Options
include Rate Limited, All or None. The default setting is None.
Use the drop-down menu to define how dropped malformed packets are
logged. Logging can be rate limited for one log instance every 20 seconds.
Options include Rate Limited, All or None. The default setting is None.
radio button to enable the stateful checks of DHCP packet
intervals for the following flow types impacting the Firewall:
Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 30 seconds.
Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 10,800 seconds.
Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 10 seconds.
Define a flow timeout value in either Seconds (1 - 32,400), Minutes
(1 - 540) or Hours (1 - 9). The default setting is 10 seconds.
Security Configuration
Application Layer
8-5