Web-Access; Access-List - Orion 3000 User Manual

IP
ip nat {enable/disable}
Enable/disable NAT/PAT function.

Web-access

web-access cpe {enable|disable}
Enable|disable the CM web access via CPE interface.
web-access cable {enable|disable}
Enable|disable the CM web access via Cable interface.

Access-list

access-list {1~20|21~40|41~60|61~75} {deny|permit} {any|source IP|mac address}
[wildcard bit]
The standard access list performs packet filtering based on source IP address from the CPE host(s).
The management access list performs packet filtering based on destination IP address matching the
Wireless LAN Cable Router IP address. The standard MAC access list performs frame filtering
based on source MAC address from the CPE host(s). Basically, the access list works as a source
address packet filter, if the access list is empty, the cable router will forward any packet, if access
list is not empty, packet filtering will be enforced according to the access list(s). The wireless MAC
access list performs filtering based on source MAC address from the wireless card, configure this
list will make only the wireless card's MAC address match this list will be associate to wireless AP.
1~20, access list ID, for standard IP access list
21~40, access list ID, for management access list
41~60, access list ID, for standard MAC access list
61~75, access list ID, for Wireless MAC access list
Example:
1) Set the access list to permit source IP 192.168.100.xxx to access network.
CM>access-list 1 permit 192.168.100.1 0.0.0.255
Note: 0.0.0.255 means 192.168.100.1~192.168.100.255
2) Set the access list to permit source IP 192.168.100.10 to access cable router (telnet, web-page,
snmp)
CM>access-list 21 permit 192.168.100.10 0.0.0.0
Note: No network packet will be filtered
User's Guide
49