Specifications

5-9
Cisco Aironet Access Point Software Configuration Guide
OL-0657-07
Chapter 5 Configuring Filters and Quality of Service
Filter Setup
Figure 5-8 AP Radio Primary SSID Page
Select Open, Shared Key, or Network-EAP to set the authentications the access point recognizes. See
the “Security Overview” section on page 7-2 for a description of authentication types.
If you use open or shared authentication as well as EAP authentication, select Require EAP under Open
or Shared to block client devices that are not using EAP from authenticating through the access point.
Unicast MAC address filters allow or disallow the forwarding of unicast packets sent to specific MAC
addresses. You can create a filter that passes traffic to all MAC addresses except those you specify, or
you can create a filter that blocks traffic to all MAC addresses except those you specify.
Read the “Setting Up MAC-Based Authentication” section on page 7-29 for complete instructions on
using MAC-based authentication on an authentication server. Read the “Creating a MAC Address Filter”
section on page 5-7 for complete instructions on setting up MAC address filters.
The drop-down menus for unicast address filters contain two options:
• Allowed—The access point forwards all traffic except packets sent to the MAC addresses listed as
disallowed on the Address Filters page.
• Disallowed—The access point discards all traffic except packets sent to the MAC addresses listed
as allowed on the Address Filters page or on your authentication server.
Select Disallowed for each authentication type that also uses MAC-based authentication.
Note If you plan to discard traffic to all MAC addresses except those you specify (the Disallowed
setting), be sure to enter your own MAC address as allowed on the Address Filters page or on
your authentication server.
Step 8 Click OK. Your settings are saved and you return to the AP Radio Advanced Setup page.