Table of Contents
Advertisement
Use this command to define custom security filters for outgoing wireless
traffic. Filters are specified using standard pcap syntax
(http://www.tcpdump.org/tcpdump_man.html) with the addition of a few
Alvarion-specific placeholders. These placeholders can be used to refer to
specific MAC addresses and are expanded by the Wi² AP when the filter is
activated. Once expanded, the filter must respect the pcap syntax. The pcap
syntax is documented in the tcpdump man page:
Placeholders
• %a - MAC address of the access controller.
• %b - MAC address of the bridge.
• %g - Mac address of the default gateway assigned to the Wi² AP.
• %w - MAC address of wireless port.
wireless filters type
Supported on: Wi² AP
wireless filters type (mac | gateway | rules)
Sets the type of wireless security filter to use.
Parameters
mac
gateway
custom
Description
TheWi² AP features an intelligent bridge which can apply security filters to
safeguard the flow of wireless traffic. The filters limit both incoming and
outgoing traffic as defined below, and force the Wi² AP to exchange traffic
with a specific upstream device. If the Wi² AP is configured to use the
services of a Alvarion access controller, then the default security filters are
automatically enabled and all traffic is sent to the access controller.
Default filters for incoming wireless traffic
Applies to traffic sent from wireless client stations to the CNx.
Accepted
• Any IP traffic addressed to the access controller.
• PPPoE traffic (The PPPoe server must be the upstream device.)
• IP broadcast packets, except NetBIOS
• Certain address management protocols (ARP, DHCP) regardless of their
source address.
• Any traffic addressed to the CNx, including 802.1x.
Blocked
Wi² AP CLI Reference Guide
Traffic is forwarded to an upstream device with a
specifiec MAC address. Wireless security filters use the
default definitions.
Traffic is forwarded to the default gateway assigned to
the Wi² AP. Wireless security filters use the default
definitions.
Lets you define custom security filters and address for
the upstream device.
Virtual AP Context
69
Advertisement
Table of Contents
