IP filters prevent or allow the use of IP address(es),
IP protocols, and TCP/UDP ports through the access point's Ethernet
and radio ports. You can create a filter that passes traffic to
all addresses except those you specify, or you can create a filter
that blocks traffic to all addresses except those you specify. You
can create filters that contain elements of one, two, or all three
IP filtering methods. You can apply the filters you create to either
or both the Ethernet and radio ports and to either or both incoming
and outgoing packets.
Create/Edit
Filter Name
If you are creating a new filter, make sure <NEW>
(the default) is selected in the Create/Edit Filter index menu.
To edit an existing filter, select the filter name from the Create/Edit
Filter Index menu.
Filter Name
Enter a descriptive name for the new filter.
Default Action
Packets that do match any of the Filters Classes
are handled according to the Default Action.
Select Forward All or Block All
as the filter's default action. The filter's default action must
be the opposite of the action for at least one of the addresses
in the filter. For example, if you create a filter containing
an IP address, an IP protocol, and an TCP/UDP port, and you select
Block as the action for all of them, you must choose Forward
All as the filter's default action.
Destination Address
Enter the IP address you want to filter. If you
plan to block traffic to all IP addresses except those you specify
as allowed, put the address of your own PC in the list of allowed
addresses to avoid losing connectivity to the access point.
Mask
Type the mask for the destination IP address.
Enter the mask with periods separating the three groups of four
characters (112.334.556.778, for example). If you enter 255.255.255.255
as the mask, the access point accepts any IP address. If you enter
0.0.0.0, the access point looks for an exact match with the IP
address you entered in the IP Address field. The mask you enter
in this field behaves the same way that a mask behaves when you
enter it in the CLI.
Source Address
Enter the IP address you want to filter. If you
plan to block traffic to all IP addresses except those you specify
as allowed, put the address of your own PC in the list of allowed
addresses to avoid losing connectivity to the access point.
Mask
Type the mask for the source IP address. Enter
the mask with periods separating the three groups of four characters
(112.334.556.778, for example). The method for entering the mask
depends on the release.
Entering 255.255.255.255 as the mask causes the
access point to accept any IP address. If you enter 0.0.0.0, the
access point looks for an exact match with the IP address you
entered in the IP Address field. The mask you enter in this field
behaves the same way that a mask behaves when you enter it in
the CLI.
Action
Select Forward or
Block. Click Add. The address
appears in the Filters Classes field.
IP Protocol
To filter an IP protocol, select one of the common
protocols from the drop-down menu or select the Custom
radio button and enter the number of an existing ACL in the Custom
field. Enter an ACL number from 0 to 255.
Action
Select Forward or Block. Click
Add. The protocol appears in the Filters Classes field.
TCP Port
To filter a TCP protocol, select one of the common
port protocols from the drop-down menu or select the Custom
radio button and enter the number of an existing protocol in one
of the Custom fields. Enter a protocol number from 0 to 65535.
Action
Select Forward or Block. Click
Add. The protocol appears in the Filters Classes field.
UDP Port
To filter a UDP protocol, select one of the common
port protocols from the drop-down menu or select the Custom
radio button and enter the number of an existing protocol in one
of the Custom fields. Enter a protocol number from 0 to 65535.
Action
Select Forward or Block. Click
Add. The protocol appears in the Filters Classes field.
Filters Classes
The protocols appear on this portion of the window.
To remove the protocol from the Filters Classes list, select it
and click Delete Class.