broadcast filter and 802.1x

[Thunderbird_IT]

We have  inbound/outbound filters on a clear SSID, that we would like to port to a new 802.1x based WPA2-Enterprise SSID.  The filter basically stops non-essential icmp/broadcast/multicast traffic (ping,dropbox,bonjour, etc)

 Anyone have any input on how to adjust these filter rules to allow for 802.1x authentication traffic ?

The current Inbound filter:

( arp or (udp src port 68 and udp dst port 67) or ((not multicast) and (not broadcast) and (not icmp) and ip) )

and Outbound filter:

( arp or (udp dst port 68) or ((not multicast) and (not broadcast) and (not icmp) and ip) )

Thanks in advance,

Johan