HP MSM7xx Management And Configuration Manual page 159

When access control is disabled, available options are:
Configure security filter settings using the available options as described in the following
section.
Restrict wireless traffic to
This setting defines the upstream device to which the AP will forward wireless traffic. If you
are using multiple VLANs, each with a different gateway, use the MAC address option.
 Access point's default gateway: This sends traffic to the default gateway assigned to
the AP. The default wireless security filters are in effect for wireless traffic.
 MAC address: Specify the MAC address of the upstream device to which all traffic is to
be forwarded. The default wireless security filters are in effect for wireless traffic.
 Custom: Use this option to define custom wireless security filters and a custom target
address for the upstream device. Refer to the Custom section that follows for details.
Default wireless security filter definitions
The following filters are defined by default.
Incoming wireless traffic filters
Applies to traffic sent from wireless users to the AP.
Accepted
 Any IP traffic addressed to the controller.
 PPPoE traffic (The PPPoe server must be the upstream device.)
 IP broadcast packets, except NetBIOS
 Certain address management protocols (ARP, DHCP) regardless of their source address.
 Any traffic addressed to the AP, including 802.1X.
Blocked
 All traffic that is not accepted is blocked. This includes NetBIOS traffic regardless of its
source/destination address. HTTPS traffic not addressed to the AP (or upstream device)
is also blocked, which means wireless users cannot access the management tool on other
HP ProCurve APs.
Outgoing wireless traffic filters
Applies to traffic sent from the AP to wireless users.
Working with VSCs
VSC configuration options
5-21