Mac Filtering - Microsoft MN-500 User Manual

Note
If you set the Broadband
Networking Wireless Base
Station to bridging mode, the
MAC filtering settings in the
Base Station Management tool
will be unavailable.
A DMZ host is useful for experimenting with new games on the
Internet or for setting up a server on your network before you know
which ports to open for that server. A DMZ, however, should be
used only in very specific and finite situations. The computer that
hosts the DMZ is fully exposed to the Internet, and is thus
susceptible to malicious attacks and unauthorized access.
Because the computer is a virtual DMZ behind the base station, as
opposed to a real DMZ out on the Internet, it has access to the
other computers on your LAN. If a hacker were to upload a virus to
the virtual DMZ, the virus could spread to all the computers on
your network.
Because the virtual DMZ that you establish is behind the base
station NAT, the IP address for the DMZ is not public. This means
that the DMZ can resolve most, but not all, connection problems.
To establish a virtual DMZ
1. Open the Base Station Management Tool, and then click
Security.
2. On the Security menu, click Virtual DMZ (Demilitarized Zone).
3. Select the Enable check box.
4. In the text box, type the IP address assigned to the computer
that will host the virtual DMZ. To determine the IP address, see
the DHCP client list on the Home page of the Base Station
Management Tool.
5. To save the changes you have made, click Apply, or to delete
the changes, click Cancel.

MAC Filtering

You can increase the security on your network by using MAC
filtering. MAC filtering enables you to control access to network
resources, including your Internet connection and shared files and
printers. You can configure the base station to permit or deny a
client access to network resources based on the MAC address of
the adapter that the client uses.
If you want to use MAC filtering, the first step is to enable the type
or types of MAC address control that you want. The two types of
MAC address control are connection control and association
control.
Connection Control
You can use connection control to control which wired and wireless
clients will be able to connect to the base station and have access
to the Internet and all network resources.
When a wired client cannot connect to the base station, it can
communicate with other clients on the wired local network, but it
cannot:
Chapter 6: Configure 69