June 30, 2006
Confidential
Document Number BDTM10001-A05 Standard
BelAir100 User Guide
Wireless Security
Example 1
/# cd radio
/radio# show brm1 privacy status
enabled
Example 2
/# cd radio
/radio# set brm1 privacy enabled
Controlling
Inter-client
Communication
By default, wireless clients associated to an access radio can communicate to
one another (assuming they are able to determine the IP addresses of their
peer wireless clients).
For security reasons in a public network environment, it may be desirable to
block inter-client communications.
CAUTION!
Provisioning the inter-client communication control can affect the wireless
clients associated with all the SSIDs of that BelAir100 unit.
To prevent communications between associated wireless clients and still allow
them to connect to the Internet, you need to:
1 Determine the MAC address of the Internet gateway(s) or router(s) in your
network.
2 Disable wireless bridging for each of the access radios in your network.
3 Disable inter-AP wireless client communications:
a Add the previously determined gateway MAC address or addresses to the
access radio’s white list. This allows wireless clients to communicate with
the Internet. The white list typically contains the MAC address of the
gateway interfaces.
b Enable
secure port
mode for each of the access radios in your network.
If your unit contains a radio with part numbers B2CC011AA, B2CC011AB,
B2CC043AA or B2CC033AA, then you can control inter-client communication
individually for each SSID configured on that access radio. Use the
/system/
show phyinv
command to display the radio’s part number.
Determining the MAC
Address of the Internet
gateway
Determining the MAC address of your Internet gateway(s) depends on the type
of equipment you are using. Refer to your equipment’s User Manual for the
specific details.
You will need the MAC address of your gateways later to provision the white
list of the access radios configured in
secure port
mode.