ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 67 / 426

Chapter 7 Wireless LAN Profiles
ZyWALL / USG (ZLD) CLI Reference Guide
67
7.6 MAC Filter Profile Commands
The following table identifies the values required for many of these commands. Other input values
are discussed with the corresponding commands.
The following table describes the commands available for security profile management. You must
use the
configure terminal
command to enter the configuration mode before you can use
these commands.
7.6.1 MAC Filter Profile Example
The following example creates a MAC filter profile with the name ‘MACFILTER01’..
Table 19
Input Values for General MAC Filter Profile Commands
LABEL DESCRIPTION
macfilter_profile_name
The MAC filter profile name. You may use 1-31 alphanumeric characters,
underscores (
_
), or dashes (-), but the first character cannot be a number.
This value is case-sensitive.
description2
Sets the description of the profile. You may use up to 60 alphanumeric
characters, underscores (
_
), or dashes (-). This value is case-sensitive.
Table 20
Command Summary: MAC Filter Profile
COMMAND DESCRIPTION
show wlan-macfilter-profile {all |
macfilter_profile_name }
Displays the security profile(s).
all
: Displays all profiles for the selected operating mode.
macfilter_profile_name
: Displays the specified profile for the
selected operating mode.
wlan-macfilter-profile rename
macfilter_profile_name1
macfilter_profile_name2
Gives an existing security profile (
macfilter_profile_name1
) a
new name (
macfilter_profile_name2
).
[no] wlan-macfilter-profile
macfilter_profile_name
Enters configuration mode for the specified MAC filter profile. Use
the
no
parameter to remove the specified profile.
filter-action {allow | deny}
Permits the wireless client with the MAC addresses in this profile
to connect to the network through the associated SSID; select
deny to block the wireless clients with the specified MAC
addresses.
The default is set to
deny
.
[no] MAC description description2
Sets the MAC address (with optional description) to which this
profile applies.
exit
Exits configuration mode for this profile.
Router(config)# wlan-macfilter-profile test
Router(config-macfilter-profile test)# filter-action deny
Router(config-macfilter-profile test)# 01:02:03:04:05:06 description MAC01
Router(config-macfilter-profile test)# 01:02:03:04:05:07 description MAC02
Router(config-macfilter-profile test)# 01:02:03:04:05:08 description MAC03
Router(config-macfilter-profile)# exit
Router(config)#