User's Manual
Table Of Contents
- Chapter 1: Introduction 1-1
- Chapter 1: Introduction
- Chapter 2: Hardware Installation
- Chapter 3: Network Configuration
- Chapter 4: Initial Configuration
- Chapter 5: System Configuration
- Chapter 6: Command Line Interface
- Using the Command Line Interface
- Entering Commands
- Command Groups
- General Commands
- System Management Commands
- System Logging Commands
- System Clock Commands
- DHCP Relay Commands
- SNMP Commands
- snmp-server community
- snmp-server contact
- snmp-server location
- snmp-server enable server
- snmp-server host
- snmp-server trap
- snmp-server engine-id
- snmp-server user
- snmp-server targets
- snmp-server filter
- snmp-server filter-assignments
- show snmp groups
- show snmp users
- show snmp group-assignments
- show snmp target
- show snmp filter
- show snmp filter-assignments
- show snmp
- Flash/File Commands
- RADIUS Client
- 802.1X Authentication
- MAC Address Authentication
- Filtering Commands
- WDS Bridge Commands
- Spanning Tree Commands
- Ethernet Interface Commands
- Wireless Interface Commands
- interface wireless
- vap
- speed
- multicast-data-rate
- channel
- transmit-power
- radio-mode
- preamble
- antenna control
- antenna id
- antenna location
- beacon-interval
- dtim-period
- fragmentation-length
- rts-threshold
- super-g
- description
- ssid
- closed-system
- max-association
- assoc-timeout-interval
- auth-timeout-value
- shutdown
- show interface wireless
- show station
- Rogue AP Detection Commands
- Wireless Security Commands
- Link Integrity Commands
- IAPP Commands
- VLAN Commands
- WMM Commands
- Appendix A: Troubleshooting
- Appendix B: Cables and Pinouts
- Appendix C: Specifications
- Glossary
- Index
System Configuration
5-18
5
• MAC Address: Specifies a MAC address to filter, in the form xx-xx-xx-xx-xx-xx.
• Permission: Adds or deletes a MAC address from the filtering table.
Ethernet Type Filter – Controls checks on the Ethernet type of all incoming and
outgoing Ethernet packets against the protocol filtering table. (Default: Disabled)
• Disabled: Access point does not filter Ethernet protocol types.
• Enabled: Access point filters Ethernet protocol types based on the configuration of
protocol types in the filter table. If the status of a protocol is set to “ON,” the protocol
is filtered from the access point.
Note: Ethernet protocol types not listed in the filtering table are always forwarded by the
access point.
CLI Commands for Bridge Filtering – Use the filter local-bridge command from the
global configuration mode to prevent wireless-to-wireless communications through
the access point. Use the filter ap-manage command to restrict management
access from wireless clients. To configure Ethernet protocol filtering, use the filter
ethernet-type enable command to enable filtering and the filter ethernet-type
protocol command to define the protocols that you want to filter. To remove an entry
from the table, use the address filter delete command. To display the current
settings, use the show filters command from the Exec mode.
Enterprise AP(config)#filter local-bridge 6-73
Enterprise AP(config)#filter ap-manage 6-74
Enterprise AP(config)#filter uplink enable 6-74
Enterprise AP(config)#filter uplink add 00-12-34-56-78-9a 6-75
Enterprise AP(config)#filter ethernet-type enable 7-74
Enterprise AP(config)#filter ethernet-type protocol ARP 6-76
Enterprise AP(config)#exit
Enterprise AP#show filters
6-77
Protocol Filter Information
=========================================================
Local Bridge :ENABLED
AP Management :ENABLED
Ethernet Type Filter :ENABLED
Enabled Protocol Filters
---------------------------------------------------------
Protocol: ARP ISO: 0x0806
=========================================================
Enterprise AP#