User's Guide

Chapter 16: Controlling Access to the ER-1000
TR0190 Rev. A1 102
firewall> set gateway=yes
disable it with
> use firewall
firewall> set gateway=no
Web GUI
It is not possible to configure the state of the gateway firewall via the web interface.
16.3 Blocking Client-to-Client Traffic
Client-to-client traffic can be blocked or permitted on a per-interface basis. By enabling client-
to-client traffic blocking for one or more of an EL-500’s client access interfaces, the client
devices that attach to that particular interface will not be able to communicate with any client
devices attached to that or any other client access interface on the EL-500. Client-to-client
traffic can be controlled for interfaces wlan1, wlan2, wlan3, and wlan4.
CLI
The parameters that control client-to-client access are all in the ‘firewall’ interface. They are:
• node.allowc2c.wlan1
• node.allowc2c.wlan2
• node.allowc2c.wlan3
• node.allowc2c.wlan4
To block client-to-client traffic, select the ‘firewall’ interface and set the parameter for the
appropriate interface to ‘no’, To allow traffic between client devices, set the parameter to ‘yes’.
The examples below illustrate how to configure these parameters.
To block client-to-client traffic for client devices attached to wlan1:
> use firewall
firewall> set node.allowc2c.wlan1=no
To allow client-to-client traffic for client devices attached to wlan2:
> use firewall
firewall> set node.allowc2c.wlan2=yes