SMC Networks ELITECONNECT SMC2502W User Manual page 34

d.
Examples:
CDP enable tcpdump syntax
WNMP enable tcpdump
syntax
Multicast
Step 4.
Type the number of seconds for client probes: the amount of idle time
before the WLAN Security System checks on the client.
When the client is idle, that is, when it is not sending any packets to the
network, this timer runs. When the client probes timer expires, the
WLAN Secure Server or WLAN Access Manager probes the client by
sending it an ARP request. The WLAN Secure Server continues sending
ARP requests at the specified interval as long as the client is idle.
Step 5.
Type the number of seconds of idle time to disassociate clients after.
This counter determines how long a client must be idle before the WLAN
Access Manager disassociates that client. A disassociation is:
1) the WLAN Access Manager forgets the client and the client's MAC
address, and wipes its rights from memory;
2) the WLAN Access Manager sends a message to the Rights Manager,
which tells the Rights Manager that the client is no longer connected. At
this point the Rights Manager starts the linger timer. The linger timer is
how long a client has to re-establish communication before it must re-
authenticate See
on the linger timer.
Step 6.
Click the checkboxes for those ports on which you want to Forward
broadcast IP packets to clients. You can click none, any, or all of the ports.
Enabling this functionality permits broadcast IP packets to be transmitted to all clients on the selected
ports, even unauthenticated clients. In some circumstances, broadcast IP packets contain sensitive infor-
mation that network administrators prefer to keep from unauthenticated users.
Step 7.
Configure the Port Settings.
Clients connected to WLAN Access Manager or WLAN Secure Server ports can
obtain an IP address in one of three ways:
• NAT mode: the WLAN Access Manager or WLAN Secure Server responds to a
DHCP request from a client with an address on the logical subnet 42.x.x.x. The
2-8
Click Other.
You can enter arbitrary tcpdump syntax in this box to specify what
Layer 2 traffic to allow through this WLAN Secure Server or WLAN
Access Manager. Any tcpdump-enabled packets are in addition to
those enabled by checking CDP, WNMP, or Multicast options, above.
See Appendix A for a description of tcpdump syntax.
ether [12:2]<= 1514 and ether dst 01:00:0c:cc:cc:cc and ether[14:4]
= 0xaaaa0300 and ether[18:4] = 0x000c2000
ether [12:2] = 0x8781 and ether[0:4] = 0x01a0f8f0
ip[16:4]&0xf000000=0xe0000000
Configuring the Rights Manager
IMPORTANT:
for more information
Configuring the WLAN Security System