Motorola WiNG 5.5 Reference Manual page 354

5 - 268 WiNG 5.5 Access Point System Reference Guide
Edge VLAN Mode
Trust ARP Response
Trust DHCP Responses
7. Select Add to define a new Bridge VLAN configuration,
or Delete to remove a VLAN configuration.
8. If adding a new bridge VLAN configuration, use the spinner control to define or override a VLAN ID from 1 - 4094. This value
must be defined and saved before the General tab can become enabled and the remainder of the settings defined.
Defines whether the VLAN is currently in edge VLAN mode. An edge VLAN is the VLAN
where hosts are connected. For example, if VLAN 10 is defined with wireless clients
and VLAN 20 is where the default gateway resides, VLAN 10 should be marked as an
edge VLAN and VLAN 20 shouldn't be marked as an edge VLAN. When defining a VLAN
as edge VLAN, the firewall enforces additional checks on hosts in that VLAN. For
example, a host cannot move from an edge VLAN to another VLAN and still keep
firewall flows active.
When ARP trust is enabled, a green check mark displays. When disabled, a red "X"
displays. Trusted ARP packets are used to update the IP-MAC Table to prevent IP spoof
and arp-cache poisoning attacks.
When DHCP trust is enabled, a green check mark displays. When disabled, a red "X"
displays. When enabled, DHCP packets from a DHCP server are considered trusted and
permissible within the network. DHCP packets are used to update the DHCP Snoop
Table to prevent IP spoof attacks.
Figure 5-167 Device Overrides - Add Network Bridge VLAN screen
Edit to modify or override an existing Bridge VLAN configuration