User's Manual

Tsunami MP.11 2454-R, 5054-R, and 5054-R-LR Installation and Management
Chapter 5. Using the Web Interface 79
Click the Configure button, the Filtering tab, and the Static MAC sub-tab to access the Static MAC Address
filter.
Each MAC address or mask is comprised of 12 hexadecimal digits (0-9 and A-F) that correspond to a 48-bit
identifier. (Each hexadecimal digit represents 4 bits (each bit represents the value 0 or 1).
Taken together, a MAC address/mask pair specifies an address or a range of MAC addresses that the unit looks
for when examining packets. The unit uses Boolean logic to perform an “and” operation between the MAC
address and the mask at the bit level. However, for most users, you do not need to think in terms of bits. It
should be sufficient to create a filter using only the hexadecimal digits 0 and F in the mask (where 0 allows any
value and F allows only the value specified in the MAC address). A mask of 00:00:00:00:00:00 corresponds to all
MAC addresses, and a mask of FF:FF:FF:FF:FF:FF:FF:FF applies only to the specified MAC address.
For example, if the MAC address is 00:20:A6:12:54:C3 and the mask is FF;FF;FF;00:00:00, the unit examines the
source and destination addresses of each packet looking for any MAC address starting with 00:20:A6. If the
mask is FF;FF;FF;FF;FF;FF, the unit looks only for the specific MAC address (in this case, 00:20:A6:12:54:C3).
When creating a filter, you can configure the Wired parameters only, the Wireless parameters only, or both sets of
parameters. Which parameters to configure depends upon the traffic that you want to block.
• To prevent all traffic from a specific wired MAC address from being forwarded to the wireless network,
configure only the Wired MAC address and Wired mask (leave the Wireless MAC and Wireless mask set to
all zeros).
• To prevent all traffic from a specific MAC address on the wireless interface from being forwarded to the wired
network, configure only the Wireless MAC and Wireless mask (leave the Wired MAC address and Wired
mask set to all zeros).
• To block traffic between a specific wired MAC address and a specific wireless MAC address, configure all four
parameters.