Proxim ORiNOCO AP-800 Software Management Manual page 78

•
To prevent entire traffic from a specific wired MAC address from being forwarded to the wireless network, configure
only the Wired MAC address and Wired Mask (leave the Wireless MAC address and Wireless Mask set to all zeros).
•
To prevent entire traffic from a specific wireless MAC address from being forwarded to the wired network, configure
only the Wireless MAC address and Wireless Mask (leave the Wired MAC address and Wired Mask set to all zeros).
•
To prevent traffic between a specific wired MAC address and a specific wireless MAC address, configure all four
parameters. Configure the wired and wireless MAC address and set the wired and wireless mask to all Fs.
•
To prevent all traffic from a specific wired group MAC address from being forwarded to the wireless network,
configure only the Wired MAC address and Wired Mask (leave the Wireless MAC address and Wireless Mask set to all
zeros).
•
To prevent entire traffic from a specific wireless group MAC address from being forwarded to the wired network,
configure only the Wireless MAC address and Wireless Mask (leave the Wired MAC address and Wired Mask set to all
zeros).
•
To prevent traffic between a specific wired group MAC address and a specific wireless group MAC address, configure
all four parameters. Configure the wired and wireless MAC address and set the wired and wireless mask to all Fs.
5.8.2.1 Static MAC Filter Examples
Consider a network that contains a wired interface and three wireless clients. The MAC address for each unit is as follows:
•
Wired Interface: 00:40:F4:1C:DB:6A
•
Wireless Client 1: 00:02:2D:51:94:E4
•
Wireless Client 2: 00:02:2D:51:32:12
•
Wireless Client 3: 00:20:A6:12:4E:38
Scenario
Prevent two specific devices
from communicating
Prevent multiple Wireless
devices from
communicating with a
single wired device
®
ORiNOCO 802.11n Access Points - Software Management Guide
Example
Configure the following settings to prevent
the Wired Interface and Wireless Client 1 from
communicating:
Wired MAC address: 00:40:F4:1C:DB:6A
Wired Mask: FF:FF:FF:FF:FF:FF
Wireless MAC address: 00:02:2D:51:94:E4
Wireless Mask: FF:FF:FF:FF:FF:FF
Configure the following settings to prevent
Wireless Clients 1 and 2 from communicating
with the Wired Interface:
Wired MAC address: 00:40:F4:1C:DB:6A
Wired Mask: FF:FF:FF:FF:FF:FF
Wireless MAC address: 00:02:2D:51:94:E4
Wireless Mask: FF:FF:FF:00:00:00
Device Configuration
Result
Traffic between the Wired Interface
and Wireless Client 1 is blocked.
Wireless Clients 2 and 3 can still
communicate with the Wired Interface.
When a bitwise "AND" is performed
on the Wireless MAC address and
Wireless Mask, the result corresponds
to any MAC address beginning with
the 00:20:2D prefix. Since Wireless
Client 1 and Wireless Client 2 share the
same prefix (00:02:2D), traffic between
the Wired Interface and Wireless
Clients 1 and 2 is blocked. Wireless
Client 3 can still communicate with the
Wired Interface since it has a different
prefix (00:20:A6).
78