Filter
Top Products
Chapter 6 Interfaces
ZyWALL (ZLD) CLI Reference Guide
88
6.9.3.1 WLAN MAC Filter Commands Example
This example creates a MAC filter entry for MAC address 01:02:03:04:05:06 and sets the ZyWALL
to allow wireless access from that entry’s MAC address only.
6.10 VLAN Interface Specific Commands
This section covers commands that are specific to VLAN interfaces. VLAN interfaces also use many
of the general interface commands discussed at the beginning of Section 6.2 on page 57.
The following table identifies the values required for many of these commands. Other input values
are discussed with the corresponding commands.
This table lists the VLAN interface commands.
wlan mac-filter associate
<allow | deny>
Defines the filter action for the list of MAC addresses in the MAC address filter table.
Allow permits them to access to the ZyWALL, MAC addresses not listed will be blocked.
Deny blocks the listed addresses from accessing the router, MAC addresses not listed
will be allowed to access the router.
show wlan mac-filter status Displays the MAC filter’s activation and association settings.
show wlan mac-filter Displays the WLAN MAC filter entries.
Table 34 WLAN General Commands (continued)
COMMAND DESCRIPTION
Router(config)# wlan mac-filter 01:02:03:04:05:06 description example
Router(config)# wlan mac-filter associate allow
Router(config)# wlan mac-filter activate
Router(config)# show wlan mac-filter status
Enable: yes
Association: allow
Router(config)# show wlan mac-filter
No. MAC Description
===========================================================================
1 01:02:03:04:05:06 example
Table 35 Input Values for VLAN Interface Commands
LABEL DESCRIPTION
interface_name VLAN interface: vlanx, x = 0 - 4094
Ethernet interface: For the ZyWALL USG 300 and above, use gex, x = 1 - N, where N
equals the highest numbered Ethernet interface for your ZyWALL model.
The ZyWALL USG 200 and below models use a name such as wan1, wan2, opt, lan1,
ext-wlan, or dmz.
Table 36 interface Commands: VLAN Interfaces
COMMAND DESCRIPTION
interface interface_name Creates the specified interface if necessary and enters sub-command mode.
[no] port interface_name Specifies the Ethernet interface on which the VLAN interface runs. The no command
clears the port.