85
Network Parameters
• To edit or delete an entry, click Edit and change the information, or select Enable, Disable, or Delete from the
Status drop-down menu.
• An entry’s status must be enabled in order for the protocol to be subject to the filter. The default filters are all
disabled by default.
2. Select the interfaces or interfaces that will implement the filter from the Ethernet Protocol Filtering drop-down
menu.
•Ethernet: Packets are examined at the Ethernet interface
•Wireless A: Packets are examined at the Slot A wireless interface
•Wireless B: Packets are examined at the Slot B wireless interface
•All Interfaces: Packets are examined at all interfaces
•Disabled: The filter is not used
3. Select the Filter Operation Type.
• If set to Passthru, only the enabled Ethernet Protocols listed in the Filter Table will pass through the bridge.
• If set to Block, the bridge will block enabled Ethernet Protocols listed in the Filter Table.
4. Click OK to save your changes.
5. Reboot the AP for your changes to take effect.

Static MAC

The Static MAC Address filter can prevent certain wireless clients from connecting to the network (based on the client’s
MAC address). For example, you can block all wireless clients from a single manufacturer from accessing your
hotspot. This feature is similar to the MAC Access Table except you can use MAC address wildcards to block a range
of addresses (for the MAC Access Table you specify a single MAC address).
NOTE
The Static MAC feature on the AP-2500 does not provide the same functionality as the Static MAC feature
supported by the AP-2000 and AP-600. The AP-2500 supports the AP-2000/AP-600 Static MAC
implementation only when the AP is operating in Bridge mode.
Each static MAC entry contains the following fields:
•Wired MAC Address
•Wired Mask
•Wireless MAC Address
•Wireless Mask
•Comment: This field is optional.
Each MAC Address or Mask is comprised of 12 hexadecimal digits (0-9, A-F) that correspond to a 48-bit identifier.
(Each hexadecimal digit represents 4 bits (each bit is a 0 or a 1).)
Follow these steps to configure the AP to block a range of MAC addresses from accessing the network:
1. Login to the AP’s Web browser interface.
2. Click Configure > Filtering > Static MAC.
3. Click Add.
4. In the Wired MAC Address field, enter the MAC address or MAC address prefix that corresponds to the wireless
devices that you want to block on the network.
• Example: You want to prevent customers who purchased an unauthorized wireless card from accessing the
network. The manufacturer of the unauthorized card uses a MAC address prefix of 00:03:8F (in other words,
the MAC address of all of the cards from that manufacturer begin with 00:03:8F). Therefore, you would enter
00:03:8F:00:00:00 in the Wired MAC Address field.
5. In the Wired Mask field, enter a filter for the address you entered in the Wired MAC field. For best results, use Fs
or 0s for each digit.
• For the purposes of this feature, an F means that a device has to have the same digit as the Wired MAC
Address for the filter to be applied.
• For the purposes of this feature, a 0 means that a device does not need the same digit as the Wired MAC
Address for the filter to be applied.