Filtering; Ethernet Protocol; Static Mac - Proxim AP-4000 User Manual

Performing Advanced Configuration

Filtering

Filtering
The Access Point's Packet Filtering features help control the amount of traffic exchanged between the wired and wireless networks. There
are four sub-tabs under the Filtering heading:
•

Ethernet Protocol

•

Static MAC

• Advanced
• TCP/UDP Port
Ethernet Protocol
The Ethernet Protocol Filter blocks or forwards packets based on the Ethernet protocols they support.
Follow these steps to configure the Ethernet Protocol Filter:
1. Select the interface or interfaces that will implement the filter from the Ethernet Protocol Filtering drop-down menu.
• Ethernet: Packets are examined at the Ethernet interface
• Wireless-Slot A or Wireless-Slot B: Packets are examined at the Wireless A or B interfaces
• All Interfaces: Packets are examined at both interfaces
• Disabled: The filter is not used
2. Select the Filter Operation Type.
• If set to Passthru, only the enabled Ethernet Protocols listed in the Filter Table will pass through the bridge.
• If set to Block, the bridge will block enabled Ethernet Protocols listed in the Filter Table.
3. Configure the Ethernet Protocol Filter Table. This table is pre-populated with existing Ethernet Protocol Filters, however, you may enter
additional filters by specifying the appropriate parameters.
• To add an entry, click Add, and then specify the Protocol Number and a Protocol Name.
— Protocol Number: Enter the protocol number. See
numbers.
— Protocol Name: Enter related information, typically the protocol name.
• To edit or delete an entry, click Edit and change the information, or select Enable, Disable, or Delete from the Status drop-down
menu.
• An entry's status must be enabled in order for the protocol to be subject to the filter.
Static MAC
The Static MAC Address filter optimizes the performance of a wireless (and wired) network. When this feature is properly configured, the AP
can block traffic between wired devices and wireless devices based on MAC address.
For example, you can set up a Static MAC filter to prevent wireless clients from communicating with a specific server on the Ethernet network.
You can also use this filter to block unnecessary multicast packets from being forwarded to the wireless network.
NOTE
The Static MAC Filter is an advanced feature. You may find it easier to control wireless traffic via other filtering options, such as
Ethernet Protocol Filtering.
Each static MAC entry contains the following fields:
• Wired MAC Address
• Wired Mask
• Wireless MAC Address
• Wireless Mask
• Comment: This field is optional.
Each MAC Address or Mask is comprised of 12 hexadecimal digits (0-9, A-F) that correspond to a 48-bit identifier. (Each hexadecimal digit
represents 4 bits (0 or 1).)
Taken together, a MAC Address/Mask pair specifies an address or a range of MAC addresses that the AP will look for when examining
packets. The AP uses Boolean logic to perform an "AND" operation between the MAC Address and the Mask at the bit level. However, for
most users, you do not need to think in terms of bits. It should be sufficient to create a filter using only the hexadecimal digits 0 and F in the
Mask (where 0 is any value and F is the value specified in the MAC address). A Mask of 00:00:00:00:00:00 corresponds to all MAC
addresses, and a Mask of FF:FF:FF:FF:FF:FF applies only to the specified MAC Address.
http://www.iana.org/assignments/ethernet-numbers
AP-4000 User Guide
for a list of protocol
65