Chapter 16: Controlling Access to the ER-1000
TR0190 Rev. B1
102
firewall>
set gateway=yes
disable it with
>
use firewall
firewall>
set gateway=no
Web GUI
It is not possible to configure the state of the gateway firewall via the web interface.
16.3 Blocking Client-to-Client Traffic
Client-to-client traffic can be blocked or permitted on a per-interface basis. By enabling client-
to-client traffic blocking for one or more of an EL-500’s client access interfaces, the client
devices that attach to that particular interface will not be able to communicate with any client
devices attached to that or any other client access interface on the EL-500. Client-to-client
traffic can be controlled for interfaces wlan1, wlan2, wlan3, and wlan4.
CLI
The parameters that control client-to-client access are all in the ‘firewall’ interface. They are:
•
node.allowc2c.wlan1
•
node.allowc2c.wlan2
•
node.allowc2c.wlan3
•
node.allowc2c.wlan4
To block client-to-client traffic, select the ‘firewall’ interface and set the parameter for the
appropriate interface to ‘no’, To allow traffic between client devices, set the parameter to ‘yes’.
The examples below illustrate how to configure these parameters.
To block client-to-client traffic for client devices attached to wlan1:
>
use firewall
firewall>
set node.allowc2c.wlan1=no
To allow client-to-client traffic for client devices attached to wlan2:
>
use firewall
firewall>
set node.allowc2c.wlan2=yes
Summary of Contents for EL-500
Page 20: ...Chapter 3 Using the Web Interface TR0190 Rev B1 20 Figure 8 Rebooting the EL 500...
Page 68: ...Chapter 11 Ethernet Interface Configuration TR0190 Rev B1 68 Figure 38 Wired DHCP settings...
Page 108: ...Chapter 16 Controlling Access to the ER 1000 TR0190 Rev B1 108 Figure 50 VAP ACL configuration...
