This document describes how to configure and manage MAC address, IP, and Ethertype filters on the Cisco wireless mobile interface card (WMIC). It contains these sections:
Protocol filters (IP protocol, IP port, and Ethertype) prevent or allow the use of specific protocols through the WMIC Ethernet and radio ports. You can set up individual protocol filters or sets of filters. You can filter protocols for wireless client devices, users on the wired LAN, or both. For example, an SNMP filter on the WMIC's radio port prevents SNMP access through the radio but does not block SNMP access from the wired LAN.
IP address and MAC address filters allow or disallow the forwarding of unicast and multicast packets either sent from or addressed to specific IP or MAC addresses. You can create a filter that passes traffic to all addresses except those you specify, or you can create a filter that blocks traffic to all addresses except those you specify.
You can configure filter by entering commands in the command-line interface (CLI).
Tip You can include filters in the WMIC's QoS policies. Refer to "QoS in a Wireless Environment" for detailed instructions on setting up QoS policies.
Configuring Filters
To configure filters using Cisco IOS CLI commands, you use access control lists (ACLs) and bridge groups. You can find explanations of these concepts and instructions for implementing them in these documents: