Configuring WSS System Parameters 205Nortel WLAN—Management Software 2300 Series Reference Guidec Click the plus sign next to System.d Select VLANs.2 In the Content panel, select the VLAN.3 Click Properties.4 Click the VLAN Member Details tab.5 To add a static multicast receiver port, select the Forward Multicast IP Out checkbox for each port youwant to add.By default, ports are not selected. To remove a static multicast receiver port, clear the checkbox.6 To add a multicast router port, select the Multicast Router Present checkbox for each port you want toadd.By default, ports are not selected. To remove a static multicast receiver port, clear the checkbox.7 Click OK.Restricting Layer 2 Traffic Among Clients in a VLANBy default, clients within a VLAN are able to communicate with one another directly at Layer 2. You can enhancenetwork security by restricting Layer 2 forwarding among clients in the same VLAN. When you restrict Layer 2forwarding in a VLAN, WSS Software allows Layer 2 forwarding only between a client and a set of MAC addresses,generally the VLAN’s default routers (gateways). Clients within the VLAN are not permitted to communicate amongthemselves directly. To communicate with another client, the client must use one of the specified default routers.You can specify up to four default router MAC addresses. The addresses must be unicast (not multicast or broadcast).1 Access the VLAN table:a Select the Configuration tool bar option.b In the Organizer panel, click the plus sign next to the WSS.c Click the plus sign next to System.d Select VLANs.2 In the Content panel, select the VLAN.3 In the Task List panel, select Restrict L2 Traffic.4 Select Restrict L2 Traffic to enable the feature for the VLAN.5 Click Create.6 In a Permitted MAC Address box, edit the address to be the MAC address of the VLAN’s default router(gateway).7 Click Finish.Note. For networks with IP-only clients, you can restrict client-to-client forwarding usingACLs. Use the Restrict L3 Traffic option. (See “Restricting Layer 3 Traffic Among Clients ina VLAN” (page 206).)
