Setup guide
Description
The access list is used by the Access Point to restrict associations of clients and by clients to restrict
associations to a given list of APs. This list contains MAC address of client and associated action to
take when client attempts to connect. Also, the forwarding of frames sent by the client is controlled.
The association procedure is as follows: when a new client wants to associate to the AP that is
configured on interface wlanN, an entry with client's MAC address and interface wlanN is looked
up in the access-list. If such entry is found, action specified in the access list is performed, else
default-authentication and default-forwarding arguments of interface wlanN are taken.
Property Description
mac-address (MAC address) - MAC address of the client
interface (name) - AP interface name
authentication (yes | no; default: yes) - whether to accept or to reject this client when it tries to
connect
forwarding (yes | no; default: yes) - whether to forward the client's frames to other wireless clients
private-key (text; default: "") - private key of the client to use for private-algo
private-algo (104bit-wep | 40bit-wep | none) - which encryption algorithm to use
Notes
If you have default authentication action for the interface set to yes, you can disallow this node to
register at the AP's interface wlanN by setting authentication=no for it. Thus, all nodes except this
one will be able to register to the interface wlanN.
If you have default authentication action for the interface set to no, you can allow this node to
register at the AP's interface wlanN by setting authentication=yes for it. Thus, only the specified
nodes will be able to register to the interface wlanN.
Example
To allow authentication and forwarding for the client 00:01:24:70:3A:BB from the wlan1 interface
using WEP 40bit algorithm with the key 1234567890:
[admin@Wandy] interface wireless access-list> add mac-address= \
\... 00:01:24:70:3A:BB interface=wlan1 private-algo=40bit-wep private-key=1234567890
[admin@Wandy] interface wireless access-list> print
Flags: X - disabled
0 mac-address=00:01:24:70:3A:BB interface=wlan1 authentication=yes
forwarding=yes skip-802.1x=yes private-algo=40bit-wep
private-key="1234567890"
[admin@Wandy] interface wireless access-list>
Info
interface wireless info
Description
This facility provides you with general wireless interface information.
Property Description