Weidmuller Wireless Ethernet Modem & Device Server WI-MOD-E-G/A User Manual
Rev.
2.16
www.weidmuller.com
61
When configuring a Whitelist it is important to add the Addresses of all devices connected to the WI-MOD-E wired
Ethernet port, that communicate over the wireless link. It is particularly important to add the Address of the configuration
PC to the Whitelist. Failure to add this address will prevent the configuration PC from making any further changes to
configuration. Design of the filter may be simplified by monitoring network traffic and forming a profile of traffic on the
wired network. Network Analysis software, such as the freely available “Wireshark” program, will list broadcast traffic sent
on the network.
For example, in the example, Device B needs to communicate with Device E via modems C & D. The Filtering requires
that at Modem C has Device B in its Whitelist and Modem D has Device E in its Whitelist. With this filtering Device A will
be not be able to access Device E, as Device A is not
present in the Whitelist in Modem C.
If radio links are chained together to form a radio backbone,
it is also important to consider the operation of the Layer 3
Transparent Bridge (Refer Section 3.8 - . A WI-MOD-E
Client will act as a MAC Address translator, as it acts as a
MAC address proxy on behalf of devices connected to its
wired Ethernet port. Addition of WI-MOD-E Client MAC
addresses into intermediate WI-MOD-E units’ Whitelist
filters may be required for correct operation.
If an erroneous configuration has prevented all access to the module, SETUP mode can be used to
restore operation.
MAC Address Filter Configuration:
MAC addresses are uniquely assigned to each device and so can be used to permit or deny network access to specific
devices through the use of Blacklists and Whitelists.
In theory, MAC filtering allows a administrators to permit or deny network access to hosts associated with the MAC
address, though in practice there are methods to circumvent this form of access control through address modification
The MAC filter entry will match only the source MAC address in the packet.
Note: It is important to add the MAC Address of the configuration PC when creating a Whitelist. If the
configuration PC is not on the Whitelist, it will be unable to communicate with the module for further
configuration.
Select “Blacklist” or
“Whitelist”.
Blacklist will prevent all listed devices from accessing the module and using
the radio link.
Whitelist will allow devices with the MAC addresses listed to communicate
with the module and utilize the radio link. All other devices are blocked.
Add Entry
Add a row to the table of Mac Address filter rules
Delete Entry
Delete the currently selected MAC address filter rule.
Enable
Check to enable the rule.
Mac Address
Enter the desired source MAC Address
Save Changes
Save changes to non-volatile memory (Reset is required to activate)
Save Changes and
Reset
Save to non-volatile memory And restart to activate changes
Figure 55 - Filtering Example