Motorola WiNG 5.5 Reference Manual page 457

Validate ARP Header
Mismatch
DHCP Trust
20. Set the following Wireless Client Deny
Wireless Client Denied
Traffic Threshold
Action
Blacklist Duration
21. Set a Firewall Session Hold Time
credentials and Firewall state information when a client roams. The default setting is 30 seconds.
22. Select OK when completed to update this WLAN's Firewall settings. Select
configuration.
WLAN Firewall Deployment Considerations
Before defining an access control configuration on a WLAN, refer to the following deployment guideline to ensure the
configuration is optimally effective:
• IP and non-IP traffic on the same Layer 2 interface can be filtered by applying both an IP ACL and a MAC ACL to the interface.
Select this radio button to check for a source MAC mismatch in the ARP header and
Ethernet header. This setting is enabled by default.
Select this radio button to enable DHCP trust on this WLAN. This setting is disabled by
default.
configuration:
If enabled, any associated client, exceeding the thresholds configured for storm traffic, is
either deauthenticated or blacklisted depending on the selected action. The threshold
range is from 1- 1000000 packets per second. This feature is disabled by default.
If enabling a wireless client threshold, use the drop-down menu to determine whether
clients are deauthenticated when the threshold is exceeded, or blacklisted from
connectivity for a user-defined interval. Selecting None applies no consequence to an
exceeded threshold.
Select this option and define a setting from 0 - 86,400 seconds. Offending clients can
reauthenticate, once this blacklist duration has been exceeded.
in either Seconds (1 - 300) or Minutes (1 - 5). This is the hold time for caching user
Wireless Configuration 6 - 31
Reset to revert the screen back to its last saved