Table of Contents
Advertisement
Table 20: Default filter example B (Continued)
In
Out
Allow
IP / Port
x
x
Intranet IP 10.3.0.20
x
x
x
*.*.*.*.
Filtering rules for an AAA child group WM-AD
If you defined a child group for an AAA WM-AD, it will have the same authentication parameters and
filter IDs as the parent WM-AD. However, you can define different filtering rules for the filters IDs in
the child configuration from those in the parent configuration.
Filtering rules between two wireless devices
Traffic from two wireless devices that are on the same WM-AD and are connected to the same Altitude
AP will pass through the Summit WM Controller and therefore be subject to filtering policy. You can set
up filtering rules that allow each wireless device access to the default gateway, but also prevent each
device from communicating with each other.
Add the following two rules to a filter ID filter, before allowing everything else:
Table 21: Rules between two wireless devices
In
Out
Allow
IP / Port
x
x
x
[Intranet IP]
x
x
[Intranet IP, range]
x
x
x
*.*.*.*.
Enabling multicast for a WM-AD
A mechanism that supports multicast traffic can be enabled as part of a WM-AD definition. This
mechanism is provided to support the demands of VoIP and IPTV network traffic, while still providing
the network access control.
NOTE
To use the mobility feature with this WM-AD, you must select the Enable Multicast Support checkbox for the data
port.
Define a list of multicast groups whose traffic is allowed to be forwarded to and from the WM-AD. The
default behavior is to drop the packets. For each group defined, you can enable Multicast Replication by
group.
Summit WM User Guide, Software Version 5.3
Description
Allow all other traffic from Intranet network to
wireless devices
Allow everything else
Description
Allow access to the Gateway IP address of the WM-AD only
Deny all access to the WM-AD subnet range (such as 0/24)
Allow everything else
191
Advertisement
Table of Contents
