RE: mac address blocking question


From: Luiz Felipe Ceglia (lceglia_at_terenet.com.br)
Date: 2002-10-01 13:49:52 UTC



Hi Martin,

What I want is to set an ACL where I may specify which mac's will pass. All other won't.

What I forgot to mention is that the host which is connected to eth0 isn't 01:02:03:04:05:06. And it still pings after I issue all that.

Thank you,

PS: Martin, you seem to be having some problems with your reply-to address.

> > iwpriv wlan0 maccmd 1
>Allow-policy
>
>> iwpriv wlan0 maccmd 4
>Kicks all auth macs
>
>> iwpriv wlan0 addmac 01:02:03:04:05:06
>Grants this address access to the system.
>
>> Altough when I issue the iwpriv commands, the file
>> /proc/net/prism2/wlan0/ap_control changes from this:
>> MAC policy: open
>> MAC entries: 0
>> MAC list:
>>
>> to this:
>> MAC policy: allow
>> MAC entries: 1
>> MAC list:
>> 01:02:03:04:05:06
>Seems OK.
>
>> I can still ping the host I have connected to eth0
>What exactly do you mean by this? Your card with address 01:02:03:04:05:06
>should still be connected (to wlan0). When setting allow policy all
>previously connected clients will be un-affected. Then all clients will be
>kicked by 'maccmd 4', but if you add 01:02:03:04:05:06 to the mac-list
>directly after, that client will re-associate immediately.
>
>/Martin

-- 
Luiz Felipe Ceglia 	-  Staff TereNet
lceglia_at_terenet.com.br	-  +55-21-9135-3679


This archive was generated by hypermail 2.1.4.