Brocade Communications Systems RFS6000 System Reference Manual page 368

6
Configuring firewalls and access control lists
6. If an existing ACL no longer satisfies controller access control requirements, select it from
7.
8. To reset the Hit Count number, click the Clear button.
9. Refer to the Associated Rules field to assess the rules and precedence associated with each
Adding a new ACL
When a packet is received by the controller, the controller compares the packet against the ACL to
verify the packet has the required permissions to be forwarded. Often, ACLs need to be added as
client permission changes during controller operation.
To create a new ACL:
1. Select Security > Wireless Firewall from the main tree menu.
2. Click the Configuration tab.
3. Click on the ACL tab to view the list of ACLs currently associated with the controller.
4. Click the Add button.
5. Select an ACL Type from the drop-down menu. The following options are available:
6. Enter a numeric index name for the ACL in the ACL ID field.
354
The ACLs field displays the list of ACLs currently associated with the controller. An ACL
contains an ordered list of ACEs. Each ACE specifies a permit or deny designation and a set of
conditions the packet must satisfy to match the ACE. Because the controller stops testing
conditions after the first match, the order of conditions in the list is critical.
amongst the existing ACLs and click the Delete button.
Use the Add button (within the ACLs field) to add an additional ACL. For more information, see
"Adding a new ACL" on page 354.
ACL. If necessary, rules and can be added or existing rules modified. For more information, see
"Adding a new ACL rule" on page 355.
•
Standard IP List – Uses source IP addresses for matching operations.
•
Extended IP List – Uses source and destination IP addresses and optional protocol
information for matching operations.
•
MAC Extended List – Uses source and destination MAC addresses, VLAN ID and optional
protocol information.
Brocade Mobility RFS6000 and RFS7000 System Reference Guide
53-1001858-01