Cambium Networks PMP 450 Series, Руководство по установке

Страница: 175 / 292

Chapter 3: System planning 175
o
EAP PEAP
l
Phase 2:
o
PAP
o
CHAP
o
MSCHAPv2
Ensure that the authentication method selected in 450 Platform Family is supported by the RADIUS
server.
Filt er ing p r ot ocols and p or t s
Configure filters for specified protocols and ports from leaving the AP/BHM and SM/BHS and entering the
network. This protects the network from both intended and inadvertent packet loading or probing by
network users. By keeping the specified protocols or ports off the network, this feature also provides a
level of protection to users from each other.
Protocol and port filtering is set per AP/SM/BH. Except for filtering of SNMP ports, filtering occurs as
packets leave the AP/SM/BH.
For example, if SM is configured to filter SNMP, then SNMP packets are blocked from entering the SM and,
thereby, from interacting with the SNMP portion of the protocol stack on the SM.
Port Filt ering w it h NAT Enabled
Where NAT is enabled on the SM/BHS, the filtering can be enabled for only the user-defined ports. The
following are examples for situations where the configure port can be filtered where NAT is enabled:
l
To block a subscriber from using FTP, you can filter Ports 20 and 21 (the FTP ports) for both the
TCP and UDP protocols.
l
To block a subscriber from access to SNMP, you can filter Ports 161 and 162 (the SNMP ports) for
both the TCP and UDP protocols.
Note
In only the SNMP case, filtering occurs before the packet interacts with the protocol stack.
Prot ocol and Port Filt ering w it h NAT Disabled
Where NAT is disabled on the SM/BHS, the filtering can be enabled for both protocols and the three user-
defined ports. Using the check boxes on the interface, it can be either:
l
Allow all protocols except those that user wish to block.
l
Block all protocols except those that user wish to allow.
Allow or block any of the following protocols:
l
PPPoE (Point to Point Protocol over Ethernet)
l
Any or all the following IPv4 (Internet Protocol version 4) protocols:
o
SMB (Network Neighborhood)
o
SNMP
o
Bootp Client