User manual

www.cooperbussmann.com/wirelessresources
Cooper Bussmann 245U-E Wireless Ethernet Modem & Device Server User Manual
63Rev Version 2.19
Figure 66 Filtering Example
NOTE If an erroneous configuration has prevented all access to the module, SETUP mode can be used to
restore operation.
MAC Address Filter Configuration
MAC addresses are uniquely assigned to each device and therefore can be used to permit or deny network access
to specific devices through the use of blacklists and whitelists. In theory, MAC filtering allows a administrators to
permit or deny network access to hosts associated with the MAC address, though in practice there are methods
to circumvent this form of access control through address modification. The MAC filter entry will match only the
source MAC address in the packet.
NOTE It is important to add the MAC address of the configuration PC when creating a whitelist. If the
configuration PC is not on the whitelist, it will be unable to communicate with the module for further
configuration.
Select “Blacklist” or
“Whitelist”
Blacklist will prevent all listed devices from accessing the module and using
the radio link. Whitelist will allow devices with the MAC addresses listed to
communicate with the module and utilize the radio link. All other devices are
blocked.
Add Entry Add a row to the table of Mac address filter rules.
Delete Entry Delete the currently selected MAC address filter rule.
Enable Select this checkbox to enable the rule.
Mac Address Enter the desired source MAC address.
Save Changes Save changes to non-volatile memory (reset is required to activate).
Save Changes and
Reset
Save to non-volatile memory and restart to activate changes.
IP Address Filter Configuration
The IP filter can be used to permit or deny network access to specific devices through the use of blacklists
(blocking of traffic that matches a rule) and whitelists (allowing traffic that matches a rule). The IP filter entry will
match either source or destination address in the packet. That is, if either the source or destination IP address falls
within the address range specified in the rule, the packet is matched and will be discarded (blacklist) or allowed
(whitelist).
If the protocol is specified, the protocol of the packet must also match. If the protocol is TCP or UDP, the source or
destination TCP/UDP can also be inspected. If the IP address and protocol matches and the source or destination
port number falls within the range specified, the packet is matched.
NOTE Configuration pages use TCP protocol on ports 80 and 443. Create whitelist rules specifying the
configuration PC’s IP address, with TCP protocol, ports 80 and 443.