3Com 3CRWE870075A User Guide - Page 32

FILTERING BY VLAN The access point supports filtering of up to 64 VLANs (virtual local area networks). The VLAN IDs must be configured for each client on one of the servers specified on the RADIUS configuration page. When VLAN filtering is enabled, the access point queries the server for the VLAN IDs of associating clients and saves the VLAN IDs. If a client does not have a VLAN ID, the access point assigns its own native VLAN ID to that client. To enable VLAN filtering, enter a VLAN ID (a number between 1 and 4095) in the Native VLAN ID field and select VLAN Enable. When VLAN filtering is disabled, the access point ignores VLAN-tagged frames. SECURITY FILTERS These options allow you to block communication among wireless clients (client-to-client blocking) and prevent wireless clients from performing access point administration. I Local Bridge Filter-Enable this filter to prevent direct communication between wireless clients, creating a more secure wireless network. I AP Management Filter-Enable this filter to prevent wireless clients from accessing the access point for management; for example through TELNET or SNMP. FILTERING BY ETHERNET PROTOCOL TYPE Use the Ethernet Type Filter table to filter out Ethernet packet frames that match the Ethernet protocol type. Select Ethernet Type Filter Enable, then set the status of each Ethernet frame type in the list. Although there are five types of IPX packets, the Filter Control page shows only two options for IPX filtering. The following table shows how to filter each IPX packet type: ISO Designator 8138 8137 802.3(Raw) 802.2 SNAP Filter Enable 8138 Enable 8137 Enable 8138 Enable 8138 Enable 8137 32