User guide

Advanced Configuration AP-4000MR User Guide
SSID/VLAN/Security
144
To configure MAC Access Status for an SSID, click Configure>SSID/VLAN/Security>Wireless A or B. The MAC ACL
Status parameter configuration is available per SSID if Security Per SSID feature is enabled. The parameter gets
applied for all SSIDs when Security per SSID is disabled. Configuration of MAC ACL status is rebootable.
NOTE: When MAC ACL table is in Strict mode, any change done in the MAC ACL web page takes effect dynamically.
When not set to Strict, all the changes in the MAC ACL web page requires a reboot.
The following list details the configurable MAC Access parameters.
• Operation Type: Choose between Passthru and Block. This determines how the stations identified in the MAC
Access Control Table are filtered.
– If set to Passthru, only the addresses listed in the Control Table will pass through the bridge.
– If set to Block, the bridge will block traffic to or from the addresses listed in the Control Table.
• MAC Access Control Table: Click Add to create a new entry. Click Edit to change an existing entry. Each entry
contains the following field:
– MAC Address: Enter the wireless client’s MAC address.
– Comment: Enter an optional comment such as the client’s name.
– Status: The entry is enabled automatically when saved (so the Status field is only visible when editing an entry).
You can also disable or delete entries by changing this field’s value.
NOTE: For larger networks that include multiple Access Points, you may prefer to maintain this list on a centralized
location using the MAC Access Control Via RADIUS Authentication.
Figure 4-59 MAC Access Configuration Screen
Wireless-A or Wireless-B
Each SSID can have its own Security Profile that defines its security mode, authentication mechanism, and encryption,
so that customers can have multiple types of clients (non-WEP, WEP, 802.1x, WPA, WPA-PSK, 802.11i, 802.11i-PSK)
on the same system separated per VLAN. See the Security Profile section for more information. Each SSID can support
a unique VLAN. In order for the AP to support multiple SSID/VLANs, VLAN Tagging must be enabled. These parameters
are configurable on the Wireless-A and Wireless-B screens.