User's Manual

Configuration MP.11 4954-R Installation and Management

Filtering Parameters

Static MAC Filter Examples

Consider a network that contains a wired server and three wireless clients. The MAC address for each unit is as follows:

• Wired Server: 00:40:F4:1C:DB:6A

• Wireless Client 1: 00:02:2D:51:94:E4

• Wireless Client 2: 00:02:2D:51:32:12

• Wireless Client 3: 00:20:A6:12:4E:38

Prevent two specific devices from communicating:

Configure the following settings to prevent the Wired Server and Wireless Client 1 from communicating:

• Wired MAC Address: 00:40:F4:1C:DB:6A

• Wired Mask: FF:FF:FF:FF:FF:FF

• Wireless MAC Address: 00:02:2D:51:94:E4

• Wireless Mask: FF:FF:FF:FF:FF:FF

Result: Traffic between the Wired Server and Wireless Client 1 is blocked. Wireless Clients 2 and 3 still can

communicate with the Wired Server.

Prevent Multiple Wireless Devices From Communicating With a Single Wired Device

Configure the following settings to prevent Wireless Clients 1 and 2 from communicating with the Wired Server:

• Wired MAC Address: 00:40:F4:1C:DB:6A

• Wired Mask: FF:FF:FF:FF:FF:FF

• Wireless MAC Address: 00:02:2D:51:94:E4

• Wireless Mask: FF:FF:FF:00:00:00

Result: When a logical “AND” is performed on the Wireless MAC Address and Wireless Mask, the result corresponds to

any MAC address beginning with the 00:20:2D prefix. Since Wireless Client 1 and Wireless Client 2 share the same

prefix (00:02:2D), traffic between the Wired Server and Wireless Clients 1 and 2 is blocked. Wireless Client 3 can still

communicate with the Wired Server since it has a different prefix (00:20:A6).

Prevent All Wireless Devices From Communicating With a Single Wired Device

Configure the following settings to prevent all three Wireless Clients from communicating with Wired Server:

• Wired MAC Address: 00:40:F4:1C:DB:6A

• Wired Mask: FF:FF:FF:FF:FF:FF

• Wireless MAC Address: 00:00:00:00:00:00

• Wireless Mask: 00:00:00:00:00:00

Result: The unit blocks all traffic between the Wired Server and all wireless clients.

Prevent A Wireless Device From Communicating With the Wired Network

Configure the following settings to prevent Wireless Client 3 from communicating with any device on the Ethernet:

• Wired MAC Address: 00:00:00:00:00:00

• Wired Mask: 00:00:00:00:00:00

• Wireless MAC Address: 00:20:A6:12:4E:38

• Wireless Mask:

FF:FF:FF:FF:FF:FF

Result: The unit blocks all traffic between Wireless Client 3 and the Ethernet network.