C423 LAN settings

LAN tab

The LAN tab provides settings for enabling Ethernet traffic on the LAN port for the C423.

LAN tab — Ethernet Port Configuration

Port enable — Determines whether the specified port is enabled for data transmission.

PoE enable — For port 2 and 3, determines whether the port is enabled for PoE output.

Notes:
- The maximum output of each port is 70.4W. If the output exceeds 70.4W, the port will lose power.
- The combined maximum output of both ports is 78 watts.
  - Assumes 90 watts of PoE input on port 1, and 12 watts required to power the device.
  - If the maximum power output of ports 2 and 3 combined exceeds the maximum available power, this will
    cause the device to fail to operate.
- The actual amount of available power will vary based on environmental factors, such as the wattage provided by the PoE injector, and the length of the Ethernet cable connecting the PoE injector to port 1.

In the WebUI, hover over the port in the graphic to show the current connection status of the port.

LAN tab — MAC Filter Configuration

AltoPlex radios support both source and destination MAC filtering.

Source MAC filtering — Configures the radio to forward network traffic on a specific Ethernet port only if the traffic is originating from specific MAC addresses.
On AltoPlex radios, source MAC filtering is configured by setting the number of allowed MAC addresses (up to 10 are supported). The radio then automatically populates an allowlist that contains the first devices that connect to the Ethernet port, up to the configured limit. Traffic is not forwarded from any devices not on the allowlist.
- You clear the allowlist by either rebooting the radio or making a change to the configuration, at which point a new allowlist will be automatically created.
Destination MAC filtering — Configures the radio's individual Ethernet ports to only forward unicast network traffic to a specified destination MAC address. Network traffic with a destination MAC address that matches the configured MAC will be forwarded. All other network traffic will be dropped.
You can also configure the radio to convert broadcast and multicast traffic into unicast and forward it to the configured destination MAC address. This may be useful for certain types of broadcast or multicast network traffic, such as DHCP requests.

Configure MAC filtering

In the MAC Filter Configuration section of the LAN tab, for each Ethernet port:

Configure source MAC filtering:
1. For Ethernet port x mac limit, select the number of MAC addresses to be included in the allowlist. Allowed values are 1-10 and Unlimited. The default is Unlimited, which means that source MAC filtering is disabled.
2. An allowlist is automatically generated based on the first MAC addresses that connect to the device after source MAC filtering is enabled, up to the configured limit.
  - You can repopulate the allowlist by rebooting the radio or making a configuration change.
  - See Show the current MAC filter configuration for information about how to determine the current source filter allowlist.
Configure destination MAC filtering:
1. For Ethernet port 1 x destination mac address, type the destination MAC address that unicast network traffic must contain for the traffic to be forwarded.
2. For Ethernet port 1 x unicast conversion, click Enable to convert broadcast and multicast network traffic to unicast and forward that traffic to the specified destination MAC address.
Click Submit Changes.

Show the current MAC filter configuration

You can show the current MAC filter configuration, including the current allowlist that the radio is using for source MAC filtering, by using either the CLI or the REST API.

CLI:
1. Log in via ssh to the D423:
  
  $ ssh admin@<hostname>
  
  admin@<hostname>'s password:
  
  where hostname is the hostname (for example, KB-C7-00-01) or IP address of the radio. See Connecting to the AltoPlex radio for more information.
2. Use the mac_filter_status command:
  KB-C7-00-01> mac_filter_status
  kb_name: KB-C7-00-01
  ports:
  eth1:
  filter_eth1_destination_mac: 70:88:6B:C7:00:02
  filter_eth1_unicast_conversion: enable
  filter_eth1_source_mac_limit: 4
  source_mac_allowlist:
  a0:b1:c2:d3:e4:f5
  0a:1b:2c:3d:4e:5f
  ff:ee:dd:cc:bb:aa
  00:11:22:33:44:55
  eth2:
  filter_eth2_destination_mac: 70:88:6B:C7:00:02
  filter_eth2_unicast_conversion: enable
  filter_eth2_source_mac_limit: 4
  source_mac_allowlist:
  a1:b2:c4:d5:e5:f6
  1a:2b:3c:4d:5e:6f
  aa:bb:cc:dd:ee:ff
  55:44:33:22:11:00
  eth3:
  filter_eth3_destination_mac:
  filter_eth3_unicast_conversion: disable
  filter_eth3_source_mac_limit: unlimited
  source_mac_allowlist:
  KB-C7-00-01>

REST API:
Use the device/mac_filter_status API. For example:
1. In your browser, type the following URL in the address bar:
  https://<hostname>/rest/v002/device/mac_filter_status?output=text
  
  where hostname is the hostname (for example, KB-C7-00-01) or IP address of the radio.
2. The following output is displayed in the browser window:
  kb_name: KB-C7-00-01
  ports:
  eth1:
  filter_eth1_destination_mac: 70:88:6B:C7:00:02
  filter_eth1_unicast_conversion: enable
  filter_eth1_source_mac_limit: 4
  source_mac_allowlist:
  a0:b1:c2:d3:e4:f5
  0a:1b:2c:3d:4e:5f
  ff:ee:dd:cc:bb:aa
  00:11:22:33:44:55
  eth2:
  filter_eth2_destination_mac: 70:88:6B:C7:00:02
  filter_eth2_unicast_conversion: enable
  filter_eth2_source_mac_limit: 4
  source_mac_allowlist:
  a1:b2:c4:d5:e5:f6
  1a:2b:3c:4d:5e:6f
  aa:bb:cc:dd:ee:ff
  55:44:33:22:11:00
  eth3:
  filter_eth3_destination_mac:
  filter_eth3_unicast_conversion: disable
  filter_eth3_source_mac_limit: unlimited
  source_mac_allowlist: