Tranzeo Wireless Technologies Inc GNVPZ1NT3 Manuale Utente
Chapter 15: Controlling Access to the EnRoute500
TR0153 Rev. E1
114
CLI
The state of the gateway firewall is controlled with the ‘gateway’ parameter in the ‘firewall’
interface. Enable the gateway firewall with
interface. Enable the gateway firewall with
> use firewall
firewall> set gateway=yes
firewall> set gateway=yes
disable it with
> use firewall
firewall> set gateway=no
firewall> set gateway=no
Web GUI
It is not possible to configure the state of the gateway firewall via the web interface.
15.3 Blocking Client-to-Client Traffic
Client-to-client traffic can be blocked or permitted on a per-interface basis. By enabling client-
to-client traffic blocking for one or more of an EnRoute500’s client access interfaces, the client
devices that attach to that particular interface will not be able to communicate with any client
devices attached to that or any other client access interface in the mesh. Client-to-client traffic
can be controlled for interfaces wlan1, wlan2, wlan3, wlan4, and eth0.
to-client traffic blocking for one or more of an EnRoute500’s client access interfaces, the client
devices that attach to that particular interface will not be able to communicate with any client
devices attached to that or any other client access interface in the mesh. Client-to-client traffic
can be controlled for interfaces wlan1, wlan2, wlan3, wlan4, and eth0.
CLI
The parameters that control client-to-client access are all in the ‘firewall’ interface. They are:
• node.allowc2c.eth0
• node.allowc2c.wlan1
• node.allowc2c.wlan2
• node.allowc2c.wlan3
• node.allowc2c.wlan4
To block client-to-client traffic, select the ‘firewall’ interface and set the parameter for the
appropriate interface to ‘no’, To allow traffic between client devices, set the parameter to ‘yes’.
The examples below illustrate how to configure these parameters.
To block client-to-client traffic for client devices attached to wlan1:
• node.allowc2c.wlan1
• node.allowc2c.wlan2
• node.allowc2c.wlan3
• node.allowc2c.wlan4
To block client-to-client traffic, select the ‘firewall’ interface and set the parameter for the
appropriate interface to ‘no’, To allow traffic between client devices, set the parameter to ‘yes’.
The examples below illustrate how to configure these parameters.
To block client-to-client traffic for client devices attached to wlan1:
> use firewall
firewall> set node.allowc2c.wlan1=no
firewall> set node.allowc2c.wlan1=no
To allow client-to-client traffic for client devices attached to eth0: