Extreme Networks Altitude 4700 Series Product Reference Manual page 194

Network Management
Adding a filter to LAN 1 for outbound traffic results in the inspection of packets at point A. Both
packets out the physical port and wireless transmissions are checked. Adding a filter to WLAN 1 for
inbound traffic results in the inspection of packets at point B. Even though WLAN 2 is on LAN 1, its
packets are unaffected. Adding a filter to WLAN 3 for inbound traffic results in the inspection of
packets at point C.
Default rules must also be set upon enabling IP filtering on a LAN or WLAN. By default, when IP
filtering is enabled, all inbound and outbound traffic is disabled. Default filters are applied when no
other applied filter is matched.
When applying multiple filters, the filter which matches first is applied. In this sense the filter priority is
the order of the list from top to bottom.
Creating a WLAN IP Filter Policy.
admin(network.wireless.wlan.ipfpolicy)>set mode 1 enable
admin(network.wireless.wlan.ipfpolicy)>add 1 icmp1 incoming deny
admin(network.wireless.wlan.ipfpolicy)>show 1
-------------------------------------------------------------------------
Idx Filter-Name
-------------------------------------------------------------------------
1 icmp1
IP Filter Mode
Default Incoming Action
Default Outgoing Action
admin(network.wireless.wlan.ipfpolicy)>
194
The following example uses the Access Point CLI:
Direction Action
incoming deny
: enable
: allow
: allow
Altitude 4700 Series Access Point Product Reference Guide