Firewall - Cisco Aironet 600 Series User Manual

Chapter 2 Access Point GUI

Firewall

The Firewall page (see
enabled, the Firewall Mode shows Firewall Enabled.
To disable the firewall, from the drop-down list choose Disabled, and then click Apply. The firewall is
disabled by default.
The following firewall settings are available:
•
•
•
•
All firewall settings are applicable on the WAN port for local traffic (traffic sent directly to the Internet,
Note
and not to the corporate network). Firewall protection for CAPWAP traffic and traffic sent through the
controller to the corporate office is configured and monitored on the WLC.
Figure 2-8
Precedence of Firewall Settings
The order of precedence of the firewall settings is as given below:
1.
2.
3.
4.
Filtering
The filters you can apply are categorized into the two sections – LAN Application Access and LAN
Access Client. See
OL-29882-03
Figure
Block all TCP and UDP port traffic. By default all ports are blocked.
Selective unblocking of traffic based on application types such as HTTP, HTTPS, SSH, and FTP.
Unblocking of traffic based on LAN destination addresses, protocols and ports.
Port forwarding, with 10 or less total entries for separate port numbers.
Configuration–Firewall Page
Port Forwards
DMZ
LAN Application Access
LAN Access Client
Figure 2-9.
2-8) allows you to enable or disable the firewall feature on the AP. If
Cisco Aironet 600 Series OfficeExtend Access Point User Guide
Configuration Page
2-9