PMP 450 Planning Guide
•
Block and Forward SM Packets to Backbone
. This not only prevents multicast/broadcast and unicast SM-to-
SM communication but also sends the packets, which otherwise would have been handled SM to SM, through
the Ethernet port of the AP.
In the CMMmicro and the CMM4, SM isolation treatment is the result of how you choose to manage the port-based
VLAN feature of the embedded switch, where you can switch all traffic from any AP to an uplink port that you
specify. However, this is not packet level switching. It is not based on VLAN IDs. See the
VLAN Port
Configuration
parameter in the dedicated user guide that supports the CMM product that you are deploying.
Filtering management through Ethernet
You can configure the SM to disallow any device that is connected to its Ethernet port from accessing the IP
address of the SM. If you set the
Ethernet Access Control
parameter to
Enabled
, then
•
no attempt to access the SM management interface (by http, SNMP, ftp, or tftp) through Ethernet can succeed.
•
any attempt to access the SM management interface over the air (by IP address, presuming that
LAN1
Network Interface Configuration, Network Accessibility
is set to
Public
, or by link from the Session Status
or Remote Subscribers tab in the AP) is unaffected.
Allowing management from only specified IP addresses
The Security tab of the Configuration web page in the AP and SM includes the
IP Access Control
parameter. You
can specify one, two, or three IP addresses that should be allowed to access the management interface (by HTTP,
SNMP, FTP, or TFTP).
If you select
•
IP Access Filtering Disabled
, then management access is allowed from any IP address, even if the
Allowed
Source IP 1 to 3
parameters are populated.
•
IP Access Filtering Enabled
, and specify at least one address in the
Allowed Source IP 1 to 3
parameter, then
management access is limited to the specified address(es).
Configuring management IP by DHCP
The IP tab in the Configuration web page of every radio contains a
LAN1 Network Interface Configuration,
DHCP State
parameter that, if enabled, causes the IP configuration (IP address, subnet mask, and gateway IP
address) to be obtained through DHCP instead of the values of those individual parameters. The setting of this
DHCP state parameter is also viewable, but is not settable, in the Network Interface tab of the Home page.
In the SM, this parameter is settable
•
in the NAT tab of the Configuration web page, but only if NAT is enabled.
•
in the IP tab of the Configuration web page, but only if the
Network Accessibility
parameter in the IP tab is set
to
Public
.
pmp-0047 (March 2014)
1-135
Summary of Contents for PMP 450
Page 1: ...Cambium PMP 450 Planning Guide System Release 13 1 ...
Page 13: ...PMP 450 Planning Guide pmp 0047 March 2014 1 3 ...
Page 42: ...PMP 450 Planning Guide Figure 14 Custom Frequency tab of the SM 1 32 pmp 0047 March 2014 ...
Page 58: ...PMP 450 Planning Guide Figure 16 AP web based management screenshot 1 48 pmp 0047 March 2014 ...
Page 82: ...PMP 450 Planning Guide 1 72 pmp 0047 March 2014 ...
Page 155: ...PMP 450 Planning Guide pmp 0047 March 2014 1 145 ...