Using An Acl Other Than Portalacl - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Using an ACL Other Than portalacl

By default, when you set the fallthru authentication type on a service profile or wired authentication port
to web-portal, MSS creates an ACL called portalacl. MSS uses the portalacl ACL to filter Web-Portal
user traffic while users are being authenticated.
To use another ACL:
1. Create a new ACL and add the first rule contained in portalacl:
set security acl ip portalacl permit udp 0.0.0.0 255.255.255.255 eq 68 0.0.0.0
255.255.255.255 eq 67
set security acl ip portalacl deny 0.0.0.0 255.255.255.255 capture
2. Add the additional rules required for your application. For example, if you want to redirect
users to a credit card server, add the ACEs to do so.
3. Add the last rule contained in portalacl:
set security acl ip portalacl deny 0.0.0.0 255.255.255.255 capture
4. Verify the new ACL configuration, before committing it to the configuration, using the
following command:
show security acl info [acl-name | all] [editbuffer]
5. Commit the new ACL to the configuration, using the following command:
commit security acl
6. Change the Web-Portal ACL name set on the service profile, using the following
command:
set service-profile name web-portal-acl aclname
7. Verify the change by displaying the service profile.
8. Save the configuration changes.
D-Link DWS-1008 User Manual 0