Table 70
Field
Action
ICMPv6 Message Type
Log if ACL is applied
Mirror all session packets
Queue Priority
Time Range
Pause ARM Scanning
Blacklist user if ACL is
applied
TOS Value
802.1p Priority
Select Add to complete the configuration of the Policies profile, or click Save to complete the editing of an
existing profile. The new policy appears on the Security > Policies page.
Security > Policies > Destinations
The Security > Policies > Destinations page lists the destination names currently configured, with the Policy
that uses the destination and the folder. To create a new destination to be referenced by a security policy, click
the Add New Net Destination button. To edit an existing policy, click the pencil icon.
The Security > Policies > Add New Destinations page contains the following fields, as described in
Table 71
Field
General Settings
Folder
140 | Configuration Reference
Security > Policies > Add New Policy Fields and Descriptions (Continued)
Default
permit
No
No
low
None
No
No
None
None
Security > Policies > Destinations Fields and Descriptions
Default
Top
Description
Action if rule is applied, which can be one of the following:
reject: deny packets. A new field will appear where you can Send Deny Response
dst-nat: perform destination NAT on packets. New fields appear to specify the
Dual NAT Pool and Dual NAT Port.
dual-nat: perform both source and destination NAT on packets
permit: forward packets
redirect: specify the location to which packets are redirected, which can be one
of the following:
Datapath Destination ID (0-65535)
ESI Server Group: specify the ESI server group configured with the esi group
command.
Tunnel: specify the ID of the tunnel configured with the interface tunnel
command
src-nat: perform source NAT on packets
Choose from the informational or error message types. This field appears if IPv6 is
enabled and ICMPv6 is selected in the Service Type field.
Whether to generate a log message when the rule is applied.
Whether to mirror all session packets to datapath or remote destination.
Assigns a matching flow to a priority queue (high/low).
Define a time range for this rule.
Whether to pause Adaptive Radio Management scan activity when traffic is
present. Note that the Scanning setting in the ARM profile should be activated in
order to be paused. Refer to
"Profiles > RF > 802.11a/g Radio > ARM Profile
Settings" on page 111
for this setting.
Whether to blacklist any user.
Value of type of service (TOS) bits to be marked in the IP header of a packet
matching this rule when it leaves the controller.
Specify 802.1p priority (0-7).
Description
Set the folder with which the security policy is associated. The drop-
down menu displays all folders available for association with the policy.
Dell PowerConnect W-AirWave 7.5 | Configuration Guide
Table
71: