91
Network Parameters
•
To edit or delete an entry, click
Edit
and change the information, or select
Enable
,
Disable
, or
Delete
from the
Status
drop-down menu.
•
An entry’s status must be enabled in order for the protocol to be subject to the filter. The default filters are all
disabled by default.
2. Select the interfaces or interfaces that will implement the filter from the
Ethernet Protocol Filtering
drop-down
menu.
•
Ethernet:
Packets are examined at the Ethernet interface
•
Wireless A:
Packets are examined at the Slot A wireless interface
•
Wireless B:
Packets are examined at the Slot B wireless interface
•
All Interfaces:
Packets are examined at all interfaces
•
Disabled:
The filter is not used
3. Select the
Filter Operation Type
.
•
If set to
Passthru
, only the enabled Ethernet Protocols listed in the Filter Table will pass through the bridge.
•
If set to
Block
, the bridge will block enabled Ethernet Protocols listed in the Filter Table.
4. Click
OK
to save your changes.
5. Reboot the AP for your changes to take effect.
Static MAC
The Static MAC Address filter can prevent certain wireless clients from connecting to the network (based on the
client’s MAC address). For example, you can block all wireless clients from a single manufacturer from accessing your
hotspot. This feature is similar to the
MAC Access
Table except you can use MAC address wildcards to block a range
of addresses (for the MAC Access Table you specify a single MAC address).
NOTE:
The Static MAC feature on the AP-2500 does not provide the same functionality as the Static MAC feature
supported by the AP-2000 and AP-600. The AP-2500 supports the AP-2000/AP-600 Static MAC
implementation only when the AP is operating in
Bridge
mode.
Each static MAC entry contains the following fields:
•
Wired MAC Address
•
Wired Mask
•
Wireless MAC Address
•
Wireless Mask
•
Comment:
This field is optional.
Each MAC Address or Mask is comprised of 12 hexadecimal digits (0-9, A-F) that correspond to a 48-bit identifier.
(Each hexadecimal digit represents 4 bits (each bit is a
0
or a
1
).)
Follow these steps to configure the AP to block a range of MAC addresses from accessing the network:
1. Login to the AP’s Web browser interface.
2. Click
Configure
>
Filtering
>
Static MAC
.
3. Click
Add
.
4. In the
Wired MAC Address
field, enter the MAC address or MAC address prefix that corresponds to the wireless
devices that you want to block on the network.
•
Example: You want to prevent customers who purchased an unauthorized wireless card from accessing the
network. The manufacturer of the unauthorized card uses a MAC address prefix of 00:03:8F (in other words,
the MAC address of all of the cards from that manufacturer begin with 00:03:8F). Therefore, you would enter
00:03:8F:00:00:00
in the
Wired MAC Address
field.
5. In the
Wired Mask
field, enter a filter for the address you entered in the Wired MAC field. For best results, use
F
s
or
0
s for each digit.
•
For the purposes of this feature, an
F
means that a device has to have the same digit as the Wired MAC
Address for the filter to be applied.
•
For the purposes of this feature, a
0
means that a device does not need the same digit as the Wired MAC
Address for the filter to be applied.