Motorola WiNG 5.5 Reference Manual page 175

Edge VLAN Mode
Trust ARP Response
Trust DHCP Responses
5. Select Add to define a new Bridge VLAN configuration,
configuration or Delete
6. If adding a new Bridge VLAN configuration, use the spinner control to define a
defined and saved before the
7. If creating a new Bridge VLAN, provide a
help differentiate it from other VLANs with similar configurations.
Defines whether the VLAN is currently in edge VLAN mode. An edge VLAN is the VLAN
where hosts are connected. For example, if VLAN 10 is defined with wireless clients
and VLAN 20 is where the default gateway resides, VLAN 10 should be marked as an
edge VLAN and VLAN 20 shouldn't be marked as an edge VLAN. When defining a VLAN
as edge VLAN, the firewall enforces additional checks on hosts in that VLAN. For
example, a host cannot move from an edge VLAN to another VLAN and still keep
firewall flows active.
When ARP trust is enabled, a green check mark displays. When disabled, a red "X"
displays. Trusted ARP packets are used to update the IP-MAC Table to prevent IP spoof
and arp-cache poisoning attacks.
When DHCP trust is enabled, a green check mark displays. When disabled, a red "X"
displays. When enabled, DHCP packets from a DHCP server are considered trusted and
permissible within the network. DHCP packets are used to update the DHCP Snoop
Table to prevent IP spoof attacks.
to remove a VLAN configuration.
Figure 5-50 Network - Bridge VLAN Configuration screen
General tab can become enabled and the remainder of the settings defined.
Description
Edit to modify the configuration of an existing Bridge VLAN
VLAN ID
(up to 64 characters) unique to the VLAN's specific configuration to
Device Configuration 5 - 89
from 1 - 4095. This value must be