Filtering, Ethernet protocol, Static mac – HP ProCurve 520wl Wireless Access Point User Manual

Page 66: Filtering -24, Ethernet protocol -24, Static mac -24, Advanced configuration

Advertising
background image

Advanced Configuration

Filtering

The Access Point’s Packet Filtering features help control the amount of traffic exchanged between the wired and
wireless networks. There are four sub-categories under the Filtering heading.

Ethernet Protocol

Static MAC

Advanced

TCP/UDP Port

Ethernet Protocol

The Ethernet Protocol Filter blocks or forwards packets based on the Ethernet protocols they support.
Follow these steps to configure the Ethernet Protocol Filter:
1. Select the interface or interfaces that will implement the filter from the Ethernet Protocol Filtering drop-down

menu.

Ethernet: Packets are examined at the Ethernet interface

Wireless: Packets are examined at the Wireless interface

All Interfaces: Packets are examined at both interfaces

Disabled: The filter is not used

2. Select the Filter Operation Type.

If set to Passthru, only the enabled Ethernet Protocols listed in the Filter Table will pass through the bridge.

If set to Block, the bridge will block enabled Ethernet Protocols listed in the Filter Table.

3. Configure the Ethernet Protocol Filter Table. This table is pre-populated with existing Ethernet Protocol Filters,

however, you may enter additional filters by specifying the appropriate parameters.

To add an entry, click Add, and then specify the Protocol Number and a Protocol Name.
Protocol Number: Enter the protocol number. See

http://www.iana.org/assignments/ethernet-numbers

for a list of protocol numbers.

Protocol Name: Enter related information, typically the protocol name.

To edit or delete an entry, click Edit and change the information, or select Enable, Disable, or Delete from the
Status drop-down menu.

An entry’s status must be enabled in order for the protocol to be subject to the filter.

Static MAC

The Static MAC Address filter optimizes the performance of a wireless (and wired) network. When this feature is
properly configured, the AP can block traffic between wired devices and wireless devices based on MAC address.
For example, you can set up a Static MAC filter to prevent wireless clients from communicating with a specific server
on the Ethernet network. You can also use this filter to block unnecessary multicast packets from being forwarded to
the wireless network.

NOTE

The Static MAC Filter is an advanced feature. You may find it easier to control wireless traffic by way of other
filtering options, such as Ethernet Protocol Filtering.

Each static MAC entry contains the following fields:
Wired MAC Address
Wired Mask
Wireless MAC Address
Wireless Mask
Comment: This field is optional.
Each MAC Address or Mask is comprised of 12 hexadecimal digits (0-9, A-F) that correspond to a 48-bit identifier.
(Each hexadecimal digit represents 4 bits (0 or 1).)
Taken together, a MAC Address/Mask pair specifies an address or a range of MAC addresses that the AP will look for
when examining packets. The AP uses Boolean logic to perform an “AND” operation between the MAC Address and

4-24

Advertising