ZyXEL Communications ZYWALL USG CLI - 5.5.3 WLAN MAC Filter Commands

Chapter 5 Interfaces
ZyWALL (ZLD) CLI Reference Guide
72
5.5.2.1 WLAN Interface Commands Example
This example configures WLAN AP interface 2 for slot 1 to use SSID WLAN_test, WPA
security modes with a pre-shared key of 12345678, IP address 1.1.1.1, netmask 255.255.255.0,
and a gateway IP address of 1.2.3.4 with a priority of 10.
5.5.3 WLAN MAC Filter Commands
Use these commands to give specific wireless clients exclusive access to the ZyWALL (allow
association) or block specific devices from accessing the ZyWALL (deny association) based
on the devices’ MAC addresses.
[no] ping-check See Section 5.2.4 on page 55 for the interface ping check
commands.
traffic-prioritize {tcp-
ack|content-filter|dns|ipsec-
vpn|ssl-vpn} bandwidth
<0..1048576> priority <1..7>
[maximize-bandwidth-usage];
Applies traffic priority when the interface sends TCP-ACK
traffic, traffic for querying the content filter, traffic for resolving
domain names, or encrypted traffic for an IPSec or SSL VPN
tunnel. It also sets how much bandwidth the traffic can use
and can turn on maximize bandwidth usage.
traffic-prioritize {tcp-
ack|content-filter|dns|ipsec-
vpn|ssl-vpn} deactivate
Turns off traffic priority settings for when the interface sends
the specified type of traffic.
exit Leaves the sub-command mode.
Table 33 WLAN Interface Commands (continued)
COMMAND DESCRIPTION
Router(config)# interface wlan-1-2
Router(config-if-wlan)# ssid WLAN_test
Router(config-if-wlan)# security wpa tkip psk key 12345678
Router(config-if-wlan)# security mode wpa
Router(config-if-wlan)# ip address 1.1.1.1 255.255.255.0
Router(config-if-wlan)# ip gateway 1.2.3.4 metric 10
Router(config-if-wlan)# exit
Table 34 WLAN General Commands
COMMAND DESCRIPTION
[no] wlan mac-filter mac_address
[description description]
Specifies the MAC address (in XX:XX:XX:XX:XX:XX format)
of the wireless station that is to be allowed or denied access
to the ZyWALL. The no command removes the entry.
description: You can use alphanumeric and
()+/
:=?!*#@$_%-
characters, and it can be up to 60
characters long.
[no] wlan mac-filter activate Turns the MAC address filter on or off.
wlan mac-filter associate <allow |
deny>
Defines the filter action for the list of MAC addresses in the
MAC address filter table. Allow permits them to access to the
ZyWALL, MAC addresses not listed will be blocked.
Deny blocks the listed addresses from accessing the router,
MAC addresses not listed will be allowed to access the router.
show wlan mac-filter status Displays the MAC filter’s activation and association settings.
show wlan mac-filter Displays the WLAN MAC filter entries.