Configuring Wireless Lan Acls - Motorola WS5100 Series Migration Giude

10-10 WS5100 Series Switch Migration Guide
4. Apply the ACL(30) on VLAN interface
WS5100(config)#interface vlan2
WS5100(config-if)#ip access-group 30 in
WS5100(config-if)#exit

10.4.2.3 Configuring Wireless LAN ACLs

Follow the procedure mentioned below to upgrade Wireless LAN ACL from 3.0/3.0.1 to 3.0.2 :
WLAN index in ACL rules are configurable in WS5100 3.0/3.0.1. In WS5100 3.0.2, WLAN is treated as a
virtual port and the user has to create ACL rules without WLAN index and attach ACLs to WLAN port.
While upgrading from WS5100 3.0/3.0.1 to 3.0.2, the ACLs having WLAN index as selectors are replaced
with ACLs without having any WLAN index selectors. After the completion of the upgrade, user has to apply
those ACLs to WLAN port manually.
A sample ACL configuration in 3.0/3.0.1
• Standard IP access list 10
permit host 1.2.3.4 wlan 3 log rule-precedence 10
• Extended IP access list 110
deny icmp host 5.6.7.8 host 5.6.7.9 wlan 4 rule-precedence 10
deny icmp host 5.6.7.8 host 5.6.7.9 rule-precedence 20
• Extended IP access list extacl
permit icmp host 192.172.0.10 any wlan 12 rule-precedence 23
deny icmp any any rule-precedence 33
• Extended MAC access list macacl
permit any host 00:01:02:03:04:05 type ip wlan 14 rule-
permit host 00:01:03:04:07:08 any wlan 14 rule-precedence 21
permit any any wlan 14 rule-precedence 31
• Standard IP access list stdacl
permit any wlan 5 rule-precedence 34
permit host 10.0.0.10 wlan 6 rule-precedence 44
deny host 30.0.0.14 rule-precedence 54
After upgrade to 3.0.2 the configuration will look like
• Standard IP access list 10
permit host 1.2.3.4 log rule-precedence 10
• Extended IP access list 110
deny icmp host 5.6.7.8 host 5.6.7.9 rule-precedence 10
• Extended IP access list extacl
permit icmp host 192.172.0.10 any rule-precedence 23
deny icmp any any rule-precedence 33
• Extended MAC access list macacl
permit any host 00:01:02:03:04:05 type ip rule-precedence 11
permit host 00:01:03:04:07:08 any rule-precedence 21
permit any any rule-precedence 31
• Standard IP access list stdacl
permit any rule-precedence 34
permit host 10.0.0.10 rule-precedence 44
deny host 30.0.0.14 rule-precedence 54
precedence 11