Owners manual

182 | Roles and Policies Aruba Instant 6.4.0.2-4.1 | User Guide
Configuring ALG Protocols
You can enable or disable protocols for Application Layer Gateway (ALG) using the Instant UI or CLI.
In the Instant UI
To configure protocols for ALG:
1. Click the Security link at the top right corner of Instant main window.
2. Clickthe Firewall Settings tab. The Firewall Settings tab contents are displayed. The following figure shows
the contents of the Firewall Settings tab:
Figure 52 Firewall Settings—ALG Protocols
3. Select Enabled from the corresponding drop-down lists to enable SIP, VOCERA, Alcatel NOE, and Cisco
skinny protocols.
4. Click OK.
When the protocols for ALG are Disabled the changes do not take effect affect until the existing user sessions are
expired. Reboot the IAP and the client, or wait for few minutes for changes to affect.
In the CLI
To configure protocols for ALG:
(Instant AP)(config)# alg
(Instant AP)(ALG)# sccp-disable
(Instant AP)(ALG)# no sip-disable
(Instant AP)(ALG)# no ua-disable
(Instant AP)(ALG)# no vocera-disable
(Instant AP)(ALG)# end
(Instant AP)# commit apply
To view the ALG configuration:
(Instant AP)# show alg
Current ALG
-----------
ALG Status
--- ------
sccp Disabled
sip Enabled
ua Enabled
vocera Enabled
Configuring Firewall Settings for Protection from ARP Attacks
You can configure firewall settings to protect the network against attacks using the Instant UI or CLI.