Proxim ORiNOCO AP-800 Installation And Management Manual page 81

3.8.2.1 Static MAC Filter Examples
Consider a network that contains a wired interface and three wireless clients. The MAC address for each unit is as follows:
•
Wired Interface: 00:40:F4:1C:DB:6A
•
Wireless Client 1: 00:02:2D:51:94:E4
•
Wireless Client 2: 00:02:2D:51:32:12
•
Wireless Client 3: 00:20:A6:12:4E:38
Scenario
Prevent two specific
devices from
communicating
Prevent multiple
Wireless devices from
communicating with a
Single Wired Device
Prevent all wireless
devices from
communicating with a
single wired device
Prevent a wireless device
from communicating
with the wired network
To configure the Static MAC Address Filter, do the following:
1. Navigate to CONFIGURATION > Filters > Static MAC Address Filters. The Static MAC Address Filters screen
appears. It contains a list of entries specifying the Wireless/Wired MAC addresses and Wireless/Wired MAC Mask to
block the traffic between wired and wireless devices.
ORiNOCO® AP-800 and AP-8000 Installation and Management Guide
Example
Configure the following settings to prevent the
Wired Interface and Wireless Client 1 from
communicating:
Wired MAC Address: 00:40:F4:1C:DB:6A
Wired Mask: FF:FF:FF:FF:FF:FF
Wireless MAC Address: 00:02:2D:51:94:E4
Wireless Mask: FF:FF:FF:FF:FF:FF
Configure the following settings to prevent Wireless
Clients 1 and 2 from communicating with the Wired
Interface:
Wired MAC Address: 00:40:F4:1C:DB:6A
Wired Mask: FF:FF:FF:FF:FF:FF
Wireless MAC Address: 00:02:2D:51:94:E4
Wireless Mask: FF:FF:FF:00:00:00
Configure the following settings to prevent all three
Wireless Clients from communicating with Wired
Interface 1:
Wired MAC Address: 00:40:F4:1C:DB:6A
Wired Mask: FF:FF:FF:FF:FF:FF
Wireless MAC Address: 00:00:00:00:00:00
Wireless Mask: 00:00:00:00:00:00
Configure the following settings to prevent Wireless
Client 3 from communicating with any device on the
ethernet:
Wired MAC Address: 00:00:00:00:00:00
Wired Mask: 00:00:00:00:00:00
Wireless MAC Address: 00:20:A6:12:4E:38
Wireless Mask: FF:FF:FF:FF:FF:FF
Device Configuration Using Web Interface
Result
Traffic between the Wired Interface
and Wireless Client 1 is blocked.
Wireless Clients 2 and 3 can still
communicate with the Wired
Interface.
When a bitwise "AND" is performed
on the Wireless MAC Address and
Wireless Mask, the result corresponds
to any MAC address beginning with
the 00:20:2D prefix. Since Wireless
Client 1 and Wireless Client 2 share
the same prefix (00:02:2D), traffic
between the Wired Interface and
Wireless Clients 1 and 2 is blocked.
Wireless Client 3 can still
communicate with the Wired
Interface since it has a different prefix
(00:20:A6).
The device blocks all traffic between
Wired Interface 1 and all wireless
clients.
The device blocks all traffic between
Wireless Client 3 and the ethernet
network.
81