Filtering - Proxim ORiNOCO AP-8000 User Manual

Access Point Features
Configuring the Device
The AP matches packets transmitted or received to a network name with the associated VLAN. Traffic received by a
VLAN is only sent on the wireless interface associated with that same VLAN. This eliminates unnecessary traffic on the
wireless LAN, conserving bandwidth and maximizing throughput.
Typical User VLAN Configurations
VLANs segment network traffic into workgroups, which enable you to limit broadcast and multicast traffic. Workgroups
enable clients from different VLANs to access different resources using the same network infrastructure. Clients using the
same physical network are limited to those resources available to their workgroup.
The AP can segment users into a maximum of 4 different workgroups per radio, based on an SSID/VLAN grouping.
The VLANs are very useful to segment the LAN into different broadcast domains. This helps in reducing the broadcast
domain by separating the logical segments of a LAN. VLANs can operate in different modes based on the incoming
traffic.
VLAN on Ethernet port of AP is configured in the Transparent mode. When the VLAN status is disabled, then the bridge
will forward the frames received on wireless interface as it is.
Once the VLAN status is enabled, all the VAP ports are configured with a valid VLAN ID (1 to 4094) and all the ports will
act as an access port. All untagged packets received from clients will be tagged by VAP port with VAP VLAN ID and then
forwarded to its destination port.
The VLAN has a 32-bit VLAN Header format as mentioned below:
TPID
16
• TPID - Tag Protocol Identifier
• CFI - Canonical Format Identifier
• Priority - 0 to 7 (value)
• VID - VLAN ID (1 to 4094)
VLAN Features
• VLAN Status: This parameter is used to configure the VLAN status of the device.
• Management VLAN ID: This parameter is used to configure the Management VLAN ID. The management stations
must tag the management frames they send to the device with the management VLAN ID.

Filtering

The Access Point's Packet Filtering features help control the amount of traffic exchanged between the wired and wireless
networks.
Intra BSS Filtering
The wireless clients that associate with a certain AP form the Basic Service Set (BSS) of a network infrastructure. By
default, wireless subscribers in the same BSS can communicate with each other. However, some administrators may
wish to block traffic between wireless subscribers that are associated with the same AP to prevent unauthorized
communication and to conserve bandwidth. This feature enables you to prevent wireless subscribers within a BSS from
exchanging traffic.
Although this feature is generally enabled in public access environments, Enterprise LAN administrators use it conserve
wireless bandwidth by limiting communication between wireless clients. For example, this feature prevents peer-to-peer
file sharing or gaming over the wireless network.
• If you select to block the traffic, then the wireless traffic between the clients associated with the same or different BSS
(Basic Service Set) will not be able to communicate with each other.
Priority
3
CFI VID
1
AP-8000 User Guide
12
45