Proxim ORiNOCO AP-8000 User Manual page 47

Access Point Features
Configuring the Device
• To block traffic between a specific wired Group MAC address and a specific wireless Group MAC address, configure
all four parameters.
• To prevent the traffic between wired and wireless MAC and Group MAC address pair, configure any combination four.
A maximum of 64 entries can be created in the Static MAC filter table. To create an entry, click Add and enter the
appropriate MAC addresses and Masks to setup a filter. The entry is enabled automatically when saved.
NOTE: You can specify the MAC addresses and their Masks and also add or delete the entries. Wired and Wireless
MAC Address cannot have broadcast and multicast MAC address.
Ethernet Protocol Filtering
The Ethernet Protocol Filtering blocks or forwards packets based on the Ethernet protocols. The default table along with
the list of Ethernet protocols is made available. You can add, modify or delete the entries that you have created, but the
default values cannot be deleted. You have two options to set the filter status based on the protocol type:
• Passthru: This filter status will allow the packets to pass through.
• Block: This filter status will block the packets.
You can enter a maximum number of 64 entries for a table.
IP Layer
IP Protocol Filtering
This filtering type is also known as Advanced Filtering. The device is provided with some known protocol entries. Using
this filter type you can block the specific IP Protocol traffic. You can enable or disable the entries as well the change the
direction of the traffic.
TCP/UDP Layer
Port-based filtering enables you to control wireless user access to network services by selectively blocking TCP/UDP
protocols through the AP. A user specifies a Protocol Name, Port Number, Port Type (TCP, UDP, or TCP/UDP), and
filtering interfaces (only Wireless, only Ethernet or Both) in order to block access to services, such as Telnet and FTP,
and traffic, such as NETBIOS and HTTP. You can enter up to maximum 64 entries for a table.
For example, an AP with the following configuration would discard frames received on its Ethernet interface with a UDP
destination port number of 137, effectively blocking NETBIOS Name Service packets.
Protocol Name
NETBIOS Name Service
Filtering Features
• Global Filter Flag: This parameter is used to enable or disable the filtering tag. If you disable this filtering tag, then
the no filtering feature will be applicable.
• Intra BSS Filtering: This parameter is used configure wireless to wireless communication.
Protocol Filter
• Filtering Control: This parameter is used to enable or disable this feature.
• Filtering Type: This parameter is used to configure the filtering type. If the specific protocol is not available on the
protocol filter table, then the filtering type would be performed on the packet that is being transmitted.
• Protocol Name: This parameter represents the Ethernet protocol filtering name.
• Protocol Number: This parameter represents the Ethernet protocol filtering number.
Port Number
137
Port Type Filter Interface
UDP Ethernet
AP-8000 User Guide
Entry Status
(Enable/Disable)
Enable
47