Non-Authenticated Filter Examples - Siemens HiPath C10 User Manual

hwc_vnsconfiguration.fm
Virtual Network configuration
Configuring filtering rules for a VNS
Select IP/Port.
●
Type the default gateway IP address that you defined in the Topology tab for this VNS.
●
7. Click Add. The information appears in the Filter Rules area of the tab.
8. Select the new filter, then do the following:
If applicable, select In to refer to traffic from the wireless device that is trying to get on
●
the network.
If applicable, select Out to refer to traffic from the network host that is trying to get to
●
a wireless device.
Select the Allow checkbox applicable to the rule you defined.
●
9. Edit the order of a filter by selecting the filter and clicking the Up and Down buttons. The
filtering rules are executed in the order you define here.
10. To save your changes, click Save.
Administrators must ensure that the non-authenticated filter allows access to the
>
corresponding authentication server:
Internal captive portal – IP address of the VNS interface
●
External captive portal P – IP address of external captive portal server
●
7.6.2.1

Non-authenticated filter examples

A basic non-authenticated filter for internal Captive Portal should have three rules, in the
following order:
In Out Allow IP / Port
x x x
x x x
x x
Table 7 Non-authenticated filter example A
For external Captive Portal, an additional rule to Allow (in/out) access to the external
>
Captive Portal authentication/Web server is required.
158
HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide
IP address of default
gateway (VNS Interface
IP)
IP address of the DNS
Server
*.*.*.*
Description
Allow all incoming wireless devices access
to the default gateway of the VNS.
Allow all incoming wireless devices access
to the DNS server of the VNS.
Deny everything else.
A31003-W1040-U101-1-7619, July 2006 DRAFT