User Manual

Advanced Configuration
58
Packet Forwarding
The Packet Forwarding feature enables you to redirect traffic generated by wireless clients that are all associated to
the same AP-600 to a single MAC address. This filters wireless traffic without burdening the AP-600 and provides
additional security by limiting potential destinations or by routing the traffic directly to a firewall. You can redirect to a
specific port (Ethernet or WDS) or allow the bridge’s learning process (and the forwarding table entry for the selected
MAC address) to determine the optimal port.
127(
127(127(
127(
The gateway to which traffic will be redirected should be node on the Ethernet network. It should not be a
wireless client.
Configuring Interfaces for Packet Forwarding
Configure your AP-600 to forward packets by specifying interface port(s) to which packets are redirected and a
destination MAC address.
1. Within the
Packet Forwarding Configuration screen, check the box labeled Enable Packet Forwarding.
2. Specify a destination Packet Forwarding MAC Address. The AP-600 will redirect all unicast, multicast, and
broadcast packets received from wireless clients to the address you specify.
3. Select a Packet Forwarding Interface Port from the drop-down menu. You can redirect traffic to:
– Ethernet
– A WDS connection (see Wireless Distribution System (WDS) for details)
– Any (traffic is redirected to a port based on the bridge learning process)
4. Click OK to save your changes.
Security
The AP-600 provides three security features to protect your network from unauthorized individuals.
– MAC Access
– WEP Encryption
– 802.1x
The HTTP interface provides a configuration screen for each of these features.
MAC Access
The MAC Access tab allows you to build a list of stations, identified by their MAC addresses, authorized to access the
network through the AP-600. The list is stored inside each AP-600 within your network. Note that you must reboot the
AP-600 for any changes to the MAC Access Control Table to take effect.
• Enable MAC Access Control: Check this box to enable the Control Table.
• Operation Type: Choose between Passthru and Block. This determines how the stations identified in the MAC
Access Control Table are filtered.
• If set to Passthru, only the addresses listed in the Control Table will pass through the bridge.
• If set to Block, the bridge will block traffic to or from the addresses listed in the Control Table.
• MAC Access Control Table: Click Add to create a new entry. Click Edit to change an existing entry. Each entry
contains the following field:
– MAC Address: Enter the wireless client’s MAC address.
– Comment: Enter an optional comment such as the client’s name.
• Status: The entry is enabled automatically when saved (so the Status field is only visible when editing an
entry). You can also disable or delete entries by changing this field’s value.
127(
127(127(
127(
For larger networks that include multiple Access Points, you may prefer to maintain this list on a centralized
location using the MAC Access Control Via RADIUS Authentication.