ADS-TEC RAP/RAC1000 User Manual - Manual (Page 102)

IT Infrastructure RAP/RAC1000
102
© ads-tec GmbH • Raiffeisenstr.14 • 70771 Leinfelden-Echterdingen
8.5 S TATIC MAC ADDRESS
The static MAC filter can be used in order to provide an interface, which has been
configured as an Access Point, with an access control capability. In this case, the MAC
address of a WLAN client is checked against the access list configured, and access will be
granted according to that. If access for a client is barred, the client will be rejected when
attempting to log in with the 802.11 protocol. This configuration, however, does not
provide very high security levels because the MAC address can easily be forged. In case of
WPA encryption, this method is not useful because WPA itself already offers sufficient
security. A MAC filter as an additional protective method would only make sense in
connection with WEP encryption. If an interface is not included in the Access Point mode,
the filter table cannot be used. The text "No wlan interface in AP mode, filter is inactive"
will appear. This menu item does not exist with RAC111x and RAC151x.
Default policy:
The default policy defines what should be done with a MAC address in the filter table. A
client can explicitly be locked out (Blacklist) or permitted (Whitelist). The last option is the
setting used in most cases.
Syslog:
If this option is set, a message will be generated in the Eventlog if a client is rejected,
because the client is explicitly locked out or not permitted.
Add new filter:
The MAC address of the client must be specified e.g. in the 00:50:C2:48:A1:BB format,
and the interfaces on which this entry should be valid, must be specified, in order to create
a new filter table entry (WLAN-1, WLAN-2, *). The options "Active" or "Inactive" can be
selected under "Action" in order to temporarily deactivate an entry or to activate this entry
not immediately. Subsequently you have to click on "Add entry".