Filtering Rules For An Aaa Child Group Vns; Filtering Rules Between Two Wireless Devices - Siemens HiPath C10 User Manual

hwc_vnsconfiguration.fm
Virtual Network configuration
Configuring filtering rules for a VNS
In Out Allow IP / Port
x
x
x x
x x
x x x
Table 12 Default filter example B
7.6.4.2

Filtering rules for an AAA child group VNS

If you defined a child group for an AAA VNS, it will have the same authentication parameters
and filter IDs as the parent VNS. However, you can define different filtering rules for the filters
IDs in the child configuration from those in the parent configuration.
7.6.4.3

Filtering rules between two wireless devices

Traffic from two wireless devices that are on the same VNS and are connected to the same
Wireless AP will pass through the HiPath Wireless Controller and therefore be subject to
filtering policy. You can set up filtering rules that allow each wireless device access to the
default gateway, but also prevent each device from communicating with each other.
Add the following two rules to a filter ID filter, before allowing everything else:
In Out Allow IP / Port
x x x
x x
x x x
Table 13 Rules between two wireless devices
164
HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide
Port 80 (HTTP) on host IP
Intranet IP 10.3.0.20, ports
10-30
Intranet IP 10.3.0.20
Intranet IP 10.3.0.20
*.*.*.*.
[Intranet IP]
[Intranet IP, range]
*.*.*.*.
Description
Deny all incoming wireless devices
access to web browsing the host
Deny all traffic from the network to the
wireless devices on the port range, such
as TELNET (port 23) or FTP (port 21)
Allow all other traffic from the wireless
devices to the Intranet network
Allow all other traffic from Intranet network
to wireless devices
Allow everything else
Description
Allow access to the Gateway IP address of the
VNS only
Deny all access to the VNS subnet range (such as
0/24)
Allow everything else
A31003-W1040-U101-1-7619, July 2006 DRAFT