Configuration
MP.11 4954-R Installation and Management
Filtering Parameters
92
Static MAC Filter Examples
Consider a network that contains a wired server and three wireless clients. The MAC address for each unit is as follows:
•
Wired Server:
00:40:F4:1C:DB:6A
•
Wireless Client 1:
00:02:2D:51:94:E4
•
Wireless Client 2:
00:02:2D:51:32:12
•
Wireless Client 3:
00:20:A6:12:4E:38
Prevent two specific devices from communicating:
Configure the following settings to prevent the Wired Server and Wireless Client 1 from communicating:
•
Wired MAC Address:
00:40:F4:1C:DB:6A
•
Wired Mask:
FF:FF:FF:FF:FF:FF
•
Wireless MAC Address:
00:02:2D:51:94:E4
•
Wireless Mask:
FF:FF:FF:FF:FF:FF
Result:
Traffic between the Wired Server and Wireless Client 1 is blocked. Wireless Clients 2 and 3 still can
communicate with the Wired Server.
Prevent Multiple Wireless Devices From Communicating With a Single Wired Device
Configure the following settings to prevent Wireless Clients 1 and 2 from communicating with the Wired Server:
•
Wired MAC Address:
00:40:F4:1C:DB:6A
•
Wired Mask:
FF:FF:FF:FF:FF:FF
•
Wireless MAC Address:
00:02:2D:51:94:E4
•
Wireless Mask:
FF:FF:FF:00:00:00
Result:
When a logical “AND” is performed on the Wireless MAC Address and Wireless Mask, the result corresponds to
any MAC address beginning with the 00:20:2D prefix. Since Wireless Client 1 and Wireless Client 2 share the same
prefix (00:02:2D), traffic between the Wired Server and Wireless Clients 1 and 2 is blocked. Wireless Client 3 can still
communicate with the Wired Server since it has a different prefix (00:20:A6).
Prevent All Wireless Devices From Communicating With a Single Wired Device
Configure the following settings to prevent all three Wireless Clients from communicating with Wired Server:
•
Wired MAC Address:
00:40:F4:1C:DB:6A
•
Wired Mask:
FF:FF:FF:FF:FF:FF
•
Wireless MAC Address:
00:00:00:00:00:00
•
Wireless Mask:
00:00:00:00:00:00
Result:
The unit blocks all traffic between the Wired Server and all wireless clients.
Prevent A Wireless Device From Communicating With the Wired Network
Configure the following settings to prevent Wireless Client 3 from communicating with any device on the Ethernet:
•
Wired MAC Address:
00:00:00:00:00:00
•
Wired Mask:
00:00:00:00:00:00
•
Wireless MAC Address:
00:20:A6:12:4E:38
•
Wireless Mask:
FF:FF:FF:FF:FF:FF
Result:
The unit blocks all traffic between Wireless Client 3 and the Ethernet network.