Contents

Device Lookup

Quick Tour > Device Lookup

---

---

This section explains the Device Lookup configured on the System Settings > Trap Monitoring Settings page.

What is Device Lookup

Normally, actions are applied to devices based on their MAC Address or IP Address. In the AMF Application Proxy feature of AW+, IP filter actions can be applied using the device’s IP Address. However, the following actions are applied based on the device’s MAC Address. Note that Device Lookup cannot be used with IP filter actions in the AMF Application Proxy.

• OpenFlow/TQ Action
  
  • Drop Packets
    
  • Quarantine
    
  • Log-Only
    
  • Redirect URL (supported only in TQ’s AMF Application Proxy)
    
• AMF Action
  
  • Drop Packets
    
  • Link-Down
    
  • Quarantine
    
  • Log-Only
    

Device Lookup operates in association with the “Device ID” configured in AMF Security mini for the MAC Address to which the action is applied, or with the “Tag” assigned to the Device ID.
The following items are configured for Device Lookup on the System Settings > Trap Monitoring Settings page.

• None
  This is the default setting. This setting reflects normal operation.
  
• Device
  This setting operates in association with the “Device ID” in the Device Authentication Data. Multiple MAC Addresses can be registered to a Device ID in AMF Security mini. When an action is applied to one of those MAC Addresses, the same action is also applied to the remaining MAC Addresses registered to that Device ID.
  
• Tag
  This setting operates in association with the “Tag” assigned to the Device ID in the Device Authentication Data.
  

  Note

  If multiple tags are assigned to a single Device ID, only the first tag configured is used.

Tags can be assigned to a Device ID in AMF Security mini, and the same tag can also be assigned to other Device IDs. When an action is applied to a MAC Address registered to a Device ID, the same action is also applied to MAC Addresses registered to other Device IDs that share the same tag.

How Device Lookup Works

The following are examples of how Device Lookup behaves when “Device” or “Tag” is configured on the System Settings > Trap Monitoring Settings page.

◼ Device
Example behavior when three MAC Addresses are configured for the device ID "Person-A".
When an action is applied to the MAC Address "00:00:00:00:00:01", the same action is also applied to the other two MAC Addresses "00:00:00:00:00:02" and "00:00:00:00:00:03".

In the above configuration, Person-A is using three devices. When an action is applied to the device with the MAC Address "00:00:00:00:00:01", the same action is also applied to the devices with the remaining MAC Addresses "00:00:00:00:00:02" and "00:00:00:00:00:03".

◼ Tag
Example behavior when the same tag is configured for both device IDs "Person-A" and "Person-B".
When an action is applied to the device with the MAC Address "00:00:00:00:00:01", the same action is also applied to the device with the MAC Address "00:00:00:00:00:02", which belongs to the device ID "Person-B" that has the same tag configured.

In the above configuration, Person-A and Person-B are each using one device and are assumed to belong to the same department, "Department-1". When an action is applied to the device with the MAC Address "00:00:00:00:00:01", which is used by Person-A, the same action is also applied to the device with the MAC Address "00:00:00:00:00:02", which is used by Person-B and belongs to the same department, "Department-1" (i.e., has the same tag configured).

---

(C) 2025 Allied Telesis, Inc. All rights reserved.

C613-04200-00 Rev A

07 Oct 2025 12:05