MAC Detector

From Wiki of WFilter NG Firewall
Jump to: navigation, search

Contents

1 MAC Detector

"MAC Detector" can gather client's physical MAC addresses via SNMP protocol. With "MAC Detector" enabled, you can:

  • Set access policy by MAC addresses.
  • Set IP-MAC binding in a multiple-segments network.
  • Show real MAC addresses in "Real-time Bandwidth".
  • Show real MAC addresses in "Internet Usage".

2 Settings

3 SNMP Commands

"MAC Detector" use snmpwalk commands to send SNMP query to manageable devices. Usually, the snmpwalk commands are sent to routing devices, for example: core three-layer switch, or manageable wireless AP.

  • "SNMP Commands": snmpwalk commands be sent to the manageable devices. Multiple commands are supported.
  • "Result Format": a regular expression which matches ONE record row.

3.1 Example

Suppose the core three layer switch has ip address "192.168.1.2", the "SNMP Command" is:

snmpwalk -v 2c -c public 192.168.1.2 ipNetToMediaPhysAddress


The real return message is:

IP-MIB::ipNetToMediaPhysAddress.9.192.168.1.1 = STRING: 0:6:f6:bf:8b:cc

IP-MIB::ipNetToMediaPhysAddress.9.192.168.1.11 = STRING: ae:15:53:a0:9b:7f ...


To match every return rows, we configure the "result format" as:

IP-MIB::ipNetToMediaPhysAddress\.\d+.*


The "MAC Detector" will use the "result format" to get every record and retrieve the mac and ip information.

Maccd00.jpg

3.2 Test

You may click "test" to test the SNMP commands in the list.

Maccd01.jpg

4 FAQ

Personal tools
Namespaces

Variants
Actions
Navigation
Tools