Acl Overview - Brocade Communications Systems RFS6000 System Reference Manual

Use the Wireless Firewall screen to view, add and configure access control configurations.
Typically, an ACL consists of series of entries called an Access Control Entry (ACE). Each ACE
defines the rule which defines whether the packets needs to be controllered/routed or needs to be
dropped. The ACL screen displays three tabs:
•
•
•
Each of these tabs has sub tabs which provide configuration options for creating and attaching the
ACLs.
NOTE
For an overview of how the controller uses an ACL to filter permissions to the controller managed
network, go to

ACL overview

An ACL contains an ordered list of Access Control Entries (ACEs). Each ACE specifies an action and
a set of conditions that a packet must satisfy in order to match the ACE. The order of conditions in
the list is critical because the controller stops testing conditions after the first match.
The controller supports the following ACLs to filter traffic:
•
•
NOTE
Port and router ACLs can be applied only in an inbound direction. WLAN ACLs support applying ACLs
in the inbound and outbound direction.
•
For more information, see
Brocade Mobility RFS6000 and RFS7000 System Reference Guide
53-1001858-01
Security Policy
Configuration
Statistics
"ACL overview"
Router ACLs — Applied to VLAN (Layer 3) interfaces. These ACLs filter traffic based on Layer 3
parameters like source IP, destination IP, protocol types and port numbers. They are applied
on packets routed through the controller. Router ACLs can be applied to inbound traffic only,
not both directions.
Port ACLs— Applied to traffic entering a Layer 2 interface. Only controllered packets are
subjected to these kind of ACLs. Traffic filtering is based on Layer 2 parameters like–source
MAC, destination MAC, Ethertype, VLAN-ID, 802.1p bits (OR) Layer 3 parameters like– source
IP, destination IP, protocol, port number.
Wireless LAN ACLs - A Wireless LAN ACL is designed to filter/mark packets based on the
wireless LAN from which they arrived rather than filtering the packets arrived on Layer 2 ports.
•
Router ACLs
•
Port ACLs
•
Wireless LAN ACLs
•
ACL actions
•
Precedence order
Configuring firewalls and access control lists
on page 349.
6
349