IP Firewall Policy - proto 17 is invalidated

MI — Thu, 06 Jan 2022 16:46:10 GMT

Hello,

we have enabled an IP Firewall Policy on one of our SSIDs. In our AP logs we have many entries like the one below (I've replaced the sensitive data):

Jan 6 11:09:06 <ap name> kernel: [fe]: IP session (id 394) <client ip>/49331 -> <dns server>/53, proto 17 is invalidated, reason ageout, lifetime 0 min 59 sec, user-name <user profile name>, hostname N/A -> user-name N/A, hostname N/A

What do they mean?

Thank you in advance.

Kind regards

MI

Re: IP Firewall Policy - proto 17 is invalidated

PumpkinEater99 — Mon, 17 Jan 2022 22:11:14 GMT

Hello,

These are normal messages, it is the AP purging an IP session after the inactive timeout value (59 seconds) was reached. Very similar to how a traditional firewall appliance handles IP sessions.

Thanks,
Chris

topic Re: IP Firewall Policy - proto 17 is invalidated in ExtremeWireless (IQE)

IP Firewall Policy - proto 17 is invalidated

Re: IP Firewall Policy - proto 17 is invalidated