Technology
Follow
Contact

WIFITECHBLOG

Wireless Solutions, Best Solutions For You !

Ads 468x60px

home
Motorola
Cisco
Draytek

Popular Posts

WiNG How-To Guide MU to MU Disallow

The MU to MU disallow feature allows the RF Switch to block communications exchanged between clients associated to a WLAN.With the Motorola ...
WiNG How-To Guide Microsoft L2TP/IPSec VPN Client-Configuration

Pre-Requisites: Requirements: The following requirements must be met prior to attempting this configuration: One (or more) RF Switc...
WiNG RADIUS Attributes

RADIUS Authentication Attributes: The RADIUS protocol follows client-server architecture and uses the User Datagram Protocol (UDP) as de...
(no title)
Using OpenLDAP database with WS5100 on-board RADIUS server

LDAP Server can be used as the database with WS5100 radius server. This document provides the details of configuration need to done for WS5...
Restore default password WS5100

WS5100 login: cli User Access Verification Username: restore Password: restoreDefaultPassword WARNING:This will wipe out the con...
WiNG How-To Guide Microsoft L2TP/IPSec VPN Client-Overview

IPSec VPN offers the security and encryption features necessary to protect enterprise data, voice, and video traffic as it traverses public...
WiNG How-To Guide RSA SecurID_Configuration

Components Used: The information in this document is based on the following hardware and software versions: · 1 x RFS4000 Swit...
WiNG How-To Guide 802.11i - Configuration

The following section outlines the configuration steps required to configure 802.11i with 802.1X and pre-shared keys on a RF Switch: 1) ...
How to Install Snipe-IT on CentOS 7 | IT Asset Management

Snipe-IT is a free and open source, cross-platform, feature-rich IT asset management system built using a PHP framework called Laravel ...

Showing posts with label Wireless Filters. Show all posts

WiNG How-To Guide Wireless Filters - Configuration

Admin Sunday, February 16, 2014 7:12 AM 0 nhận xét

Requirements

The following requirements must be met prior to attempting this configuration:

One (or more) RF Switches are installed and operational on the network.
One (or more) Access Ports configured and adopted by the RF Switch.
One (or more) WLAN profiles are configured and assigned to adopted radios.
A Windows XP workstation is available with Microsoft Internet Explorer or Mozilla Firefox to perform Web UI configuration and verify secure management operations.
One (or more) wireless workstations are available to test and verify wireless filters.
The reader has read the Motorola RFS Series Wireless LAN Switches - WiNG System Reference Guide.

Components Used:

The information in this document is based on the following Motorola hardware and software versions:

1 x RFS6000 Version 3.3.

5 x AP300s.

Configuration:

The following sections outline the configuration steps required to enable wireless filters on an RF Switch:

1) Deny Wireless Filters [Section 3.1]:

2) Allow Wireless Filters [Section 3.2]:

Deny Wireless Filters:

Wireless filters can be used to block devices and a common application for wireless filtering is to block (or blacklist) associations from a suspicious of malicious device. Administrators can create up to 1000 wireless filter entries on the RF Switch which can deny access to individual MAC addresses or range of MAC addresses as required. All MAC addresses not matched by the wireless filter list will be able to associate to the WLAN.

As shown in figure 3.1 wireless filtering has been deployed on a guest WLAN named MOTO -GUEST to block a device with the MAC address 00-40-96-ad-4c-f6. A wireless filter has been created on the RF Switch with a Start MAC and End MAC set to a specific devices MAC address. If the device attempts to associate with the MOTO-GUEST SSID, the RF Switch will deny the association attempt and a log entry for the association attempt will be made

Web UI Configuration Example:

The following configuration example will demonstrate how to blacklist a single client MAC address on a WLAN using the Web UI:

5. Click Save to apply and save changes

Allow Wireless Filters:

Wireless filters may also be used to allow access to a specific group of devices such as mobile handhelds or VoIP handsets while blocking associations for all other devices. As most enterprises typically deploy mobile devices from a common vendor, the vendors OUI can be leveraged in a wireless filter to restrict access to a range of the vendor’s devices. As no implicit deny is provided an additional wireless filter must be created after the allow filter to block access from all other vendor devices

As shown in figure 3.2, wireless filtering has been deployed on a voice WLAN named MOTO-VOICE to only allow select SpectraLink VoIP handsets to associate with the WLAN. The first wireless filter has been created on the RF Switch allowing a range of MAC addresses (00-40-96-4b-00-00 through 00-40-96-4b-ff-ff) to associate with the WLAN. A second ‘catch all’ wireless filter has been created denying access to all MAC addresses from 00-00-00-00-00-01 through ff-ff-ff-ff-ff-fe.

In this example an device with a MAC address that matches the range in the allow list will be allowed to associated with the WLAN. Devices which do not match the allowed list will be denied association from the RF Switch and a log entry for the association attempt will be made.

Web UI Configuration Example:

The following configuration example will demonstrate how to allow a range of MAC address on a WLAN using the Web UI:

RF Switch Running Configuration:

The following shows the running configuration of the RFS6000 switch used to create this guide:

RFS6000# show running-config

Reference Documentation:

Nhãn: Motorola, Wireless Filters

WiNG How-To Guide Wireless Filters - Overview

Admin 6:48 AM 0 nhận xét

Wireless filters can be applied to specific WLANs to grant or deny access to MUs based on individual or ranges of MAC addresses. Wireless filters may be applied to one or more WLANs and are used to grant or deny access to MUs during association.Wireless filters can be used for multiple applications including blacklisting malicious devices as well as providing an additional layer of security for less secure WLANs by restricting access to specific devices. Wireless filters may be applied to the RF Switch using the CLI and Web UI or from a Motorola AirDefense Enterprise server using SNMP when a threat is detected.

Applications:

Wireless filters can be used for multiple applications including blacklisting malicious devices as well as providing an additional layer of security less secure WLANs by restricting access to specific devices. Wireless filters may be applied to the RF Switch using the CLI or Web UI or from an AirDefense Enterprise server when a threat is detected.

Restrictions:

Wireless filters are only used to allow or deny MUs from associating with a WLAN and are not intended to be used to filter layer 2 traffic passing through the RF Switch. To restrict or limit traffic at layer 2, MAC firewall rules can be created which permits or denies traffic based on specific or wildcard source or destination MAC addresses.