OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mike Nye (mikeampii.net)
Date: Fri Jan 25 2002 - 10:54:35 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi list,

    I have been trying (unsuccessfully) to add some Node Filters on my BR500.

    Basically what I want to do is deny access to everyone, except the cards on
    my network.

    To do this, in the filters menu I set Ethdst, Raddst and Source to
    "discard", then added a filter for each client's MAC address with Ethdst,
    Raddst and Source set to "forward".

    This didn't work.

    After playing for a bit, I decided to try the opposite. I set Ethdst,
    Raddst and Source to "forward", "forward", and "off" respectively (their
    default values). Then for each client's MAC address, added the filters
    "discard", "discard" and "discard". These cards had full access to the
    network. Very weird (not to mention frustrating).

    Any ideas what I am doing wrong? My firmware is the latest (8.65) and my
    packet encapsulation is "RFC1042". The client cards are Compaq WL110.

    Thanks in advance.

    -Mike Nye

    _______________________________________________
    Aironet mailing list - Aironetcsl.cse.ucsc.edu
    http://csl.cse.ucsc.edu/mailman/listinfo/aironet