Filtering, Ethernet protocol, Static mac – Proxim ORiNOCO AP-700 User Manual

Page 65: Ethernet protocol static mac

Advertising
background image

Performing Advanced Configuration

AP-700 User Guide

Filtering

65

Filtering

The Access Point’s Packet Filtering features help control the amount of traffic exchanged between the wired and wireless networks. There
are four sub-tabs under the Filtering heading:

Ethernet Protocol

Static MAC

Advanced

TCP/UDP Port

Ethernet Protocol

The Ethernet Protocol Filter blocks or forwards packets based on the Ethernet protocols they support.
Follow these steps to configure the Ethernet Protocol Filter:
1. Select the interface or interfaces that will implement the filter from the Ethernet Protocol Filtering drop-down menu.

Ethernet: Packets are examined at the Ethernet interface

Wireless: Packets are examined at the Wireless interface

All Interfaces: Packets are examined at both interfaces

Disabled: The filter is not used

2. Select the Filter Operation Type.

If set to Passthru, only the enabled Ethernet Protocols listed in the Filter Table will pass through the bridge.

If set to Block, the bridge will block enabled Ethernet Protocols listed in the Filter Table.

3. Configure the Ethernet Protocol Filter Table. This table is pre-populated with existing Ethernet Protocol Filters, however, you may enter

additional filters by specifying the appropriate parameters.

To add an entry, click Add, and then specify the Protocol Number and a Protocol Name.
Protocol Number: Enter the protocol number. See

http://www.iana.org/assignments/ethernet-numbers

for a list of protocol

numbers.

Protocol Name: Enter related information, typically the protocol name.

To edit or delete an entry, click Edit and change the information, or select Enable, Disable, or Delete from the Status drop-down
menu.

An entry’s status must be enabled in order for the protocol to be subject to the filter.

Static MAC

The Static MAC Address filter optimizes the performance of a wireless (and wired) network. When this feature is properly configured, the AP
can block traffic between wired devices and wireless devices based on MAC address.
For example, you can set up a Static MAC filter to prevent wireless clients from communicating with a specific server on the Ethernet network.
You can also use this filter to block unnecessary multicast packets from being forwarded to the wireless network.

NOTE

The Static MAC Filter is an advanced feature. You may find it easier to control wireless traffic via other filtering options, such as
Ethernet Protocol Filtering.

Each static MAC entry contains the following fields:

Wired MAC Address

Wired Mask

Wireless MAC Address

Wireless Mask

Comment: This field is optional.

Each MAC Address or Mask is comprised of 12 hexadecimal digits (0-9, A-F) that correspond to a 48-bit identifier. (Each hexadecimal digit
represents 4 bits (0 or 1).)
Taken together, a MAC Address/Mask pair specifies an address or a range of MAC addresses that the AP will look for when examining
packets. The AP uses Boolean logic to perform an “AND” operation between the MAC Address and the Mask at the bit level. However, for
most users, you do not need to think in terms of bits. It should be sufficient to create a filter using only the hexadecimal digits 0 and F in the
Mask (where 0 is any value and F is the value specified in the MAC address). A Mask of 00:00:00:00:00:00 corresponds to all MAC
addresses, and a Mask of FF:FF:FF:FF:FF:FF applies only to the specified MAC Address.

Advertising