Ruckus Wireless ZoneDirector 1100 User Manual page 91

L3/L4 Access Control
In addition to L2/MAC based ACLs, ZoneDirector also provides access control options at Layer
3 and Layer 4. This means that you can configure the access control options based on a set of
criteria, including:
• Destination Address
• Application
• Protocol
• Destination Port
To create an L3/L4/IP address based ACL
1. Go to Configure > Access Control.
2. In L3/4/IP address Access Control, click Create New.
3. Type a Name for the ACL.
4. Type a Description for the ACL.
5. In Default Mode, set the default access privilege (allow all or deny all) that you want to
grant all users by default.
6. In Rules, click Create New or click Edit to edit an existing rule.
7. Define each access policy by configuring a combination of the following:
• Type: The access privilege (allow or deny) that this policy grants.
• Destination Address: Enter the IP subnet and netmask, or host IP address and 32-bit
netmask, of the network or hostname URL target to which you want to allow or deny
access. (IP addresses must be in the format A.B.C.D/M, where M is the bitmask.)
Otherwise, select Any.
• Application: If you have a specific application to which you want to allow or deny access,
select it from the menu. Otherwise, select Any. If you select an option here besides Any,
the Protocol and Destination Port options are disabled.
• Protocol: If you have a network protocol that you want to allow or deny, select it from
the menu. Otherwise, select Any.
• Destination Port: If you have a specific destination port to which you want to allow or
deny access, select it from the menu. Otherwise, select Any.
8. Click OK to save the ACL.
9. Repeat these steps to create up to 32 L3/L4/IP address-based access control rules.
Configuring Security and Other Services
Controlling Device Permissions: Blocking and ACLs
79