Installation guide

D-115
• One (or more) WLAN profiles are configured and assigned to adopted radios
• A Windows XP workstation is available with Microsoft Internet Explorer or Mozilla Firefox to perform
Web UI configuration and verify secure management operations
• One (or more) wireless workstations are available to test and verify the wireless filters
D.8.1.2 Components
The information in this section is based on the following Motorola hardware and software versions:
• 1 RFS6000 model switch
• 5 AP300 model Access Ports
D.8.1.3 Wireless Filters that Deny
Wireless filters can be used to block devices. A common scenario is to block (blacklist) associations from a
suspicious or malicious device. Administrators can create up to 1000 wireless filter entries on the RF Switch
which can deny access to individual MAC addresses or range of MAC addresses as required. All MAC
addresses not matched by the wireless filter list can associate to the WLAN.
As illustrated in the figure above, wireless filtering is deployed on a guest WLAN (named MOTO-GUEST) to
block a device with the MAC address 00-40-96-ad-4c-f6. A wireless filter has been created on the RF Switch
with a Start MAC and End MAC set to a specific device address. If the device attempts to associate with the
MOTO-GUEST SSID, the RF Switch denies the association attempt and a logs an entry for the association
attempt.
To blacklist a single client MAC address on a WLAN using the switch Web UI:
1. From the menu tree select Security > Wireless Filters.
ACL Index Start MAC End MAC Allow / Deny WLAN
1 00-40-96-ad-4c-f6 00-40-96-ad-4c-f6 Deny MOTO-GUEST