HP ProCurve 520wl Wireless Access Point - Manual (Page 66)

Advanced Configuration
Filtering
The Access Point’s Packet Filtering features help control the amount of traffic exchanged between the wired and
wireless networks. There are four sub-categories under the Filtering heading.
– Ethernet Protocol
– Static MAC
– Advanced
– TCP/UDP Port
Ethernet Protocol
The Ethernet Protocol Filter blocks or forwards packets based on the Ethernet protocols they support.
Follow these steps to configure the Ethernet Protocol Filter:
1. Select the interface or interfaces that will implement the filter from the Ethernet Protocol Filtering drop-down
menu.
•
Ethernet: Packets are examined at the Ethernet interface
• Wireless: Packets are examined at the Wireless interface
• All Interfaces: Packets are examined at both interfaces
• Disabled: The filter is not used
2. Select the Filter Operation Type.
• If set to Passthru, only the enabled Ethernet Protocols listed in the Filter Table will pass through the bridge.
• If set to Block, the bridge will block enabled Ethernet Protocols listed in the Filter Table.
3. Configure the Ethernet Protocol Filter Table. This table is pre-populated with existing Ethernet Protocol Filters,
however, you may enter additional filters by specifying the appropriate parameters.
•
To add an entry, click Add, and then specify the Protocol Number and a Protocol Name.
— Protocol Number: Enter the protocol number. See
http://www.iana.org/assignments/ethernet-numbers
for a list of protocol numbers.
— Protocol Name: Enter related information, typically the protocol name.
• To edit or delete an entry, click Edit and change the information, or select Enable, Disable, or Delete from the
Status drop-down menu.
• An entry’s status must be enabled in order for the protocol to be subject to the filter.
Static MAC
The Static MAC Address filter optimizes the performance of a wireless (and wired) network. When this feature is
properly configured, the AP can block traffic between wired devices and wireless devices based on MAC address.
For example, you can set up a Static MAC filter to prevent wireless clients from communicating with a specific server
on the Ethernet network. You can also use this filter to block unnecessary multicast packets from being forwarded to
the wireless network.
NOTE
The Static MAC Filter is an advanced feature. You may find it easier to control wireless traffic by way of other
filtering options, such as Ethernet Protocol Filtering.
Each static MAC entry contains the following fields:
• Wired MAC Address
• Wired Mask
• Wireless MAC Address
• Wireless Mask
• Comment: This field is optional.
Each MAC Address or Mask is comprised of 12 hexadecimal digits (0-9, A-F) that correspond to a 48-bit identifier.
(Each hexadecimal digit represents 4 bits (0 or 1).)
Taken together, a MAC Address/Mask pair specifies an address or a range of MAC addresses that the AP will look for
when examining packets. The AP uses Boolean logic to perform an “AND” operation between the MAC Address and
4-24