Assigning A Security Acl Locally - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

To use the local database to restrict a user, a MAC user, or a group of users or MAC users to the
permissions stored within a committed security ACL, use the following commands:
Note: If the Filter-Id value returned through the authentication and authorization process does not
match the name of a committed security ACL in the switch, the user fails authorization and cannot be
connected.
Security ACL Target
User authenticated by a password
Group of users authenticated by a
password
User authenticated by a MAC address
Group of users authenticated by a
MAC address
You can set filters for incoming and outgoing packets:
• Use acl-name.in to filter traffic that enters the switch from users via an access port or
wired authentication port, or from the network via a network port.
• Use acl-name.out to filter traffic sent from the switch to users via an access port or wired
authentication port, or from the network via a network port.
For example, the following command applies security ACL acl-101 to packets coming into the switch
from user Jose:
DWS-1008# set user Jose attr filter-id acl-101.in
success: change accepted.
The following command applies the incoming filters of acl-101 to the users who belong to the group
eastcoasters:
DWS-1008# set usergroup eastcoasters attr filter-id acl-101.in
success: change accepted.
D-Link DWS-1008 User Manual

Assigning a Security ACL Locally

Commands
set user username attr filter-id acl-name.in
set user username attr filter-id acl-name.out
set usergroup groupname attr filter-id acl-name.in
set usergroup groupname attr filter-id acl-name.out
set mac-user username attr filter-id acl-name.in
set mac-user username attr filter-id acl-name.out
set mac-usergroup groupname attr filter-id acl-name.in
set mac-usergroup groupname attr filter-id acl-name.out
1