Configuring Web Policy Enforcement Service - Aruba IAP-335 User Manual

Table 58: Access Rule Configuration Parameters
Service
Category
Disable scanning
DSCP tag
802.1p priority
3. Click OK and then click Finish.
In the CLI
To configure access rules:
(Instant AP)(config)# wlan access-rule <access-rule-name>
(Instant AP)(Access Rule <Name>)#rule <dest> <mask> <match/invert> {app <app> {permit|deny}
|appcategory <appgrp>}[<option1....option9>]
(Instant AP)(Access Rule <Name>)# end
(Instant AP)# commit apply
Example
The following CLI example shows hoe to configure employee access rules:
(Instant AP)(config)# wlan access-rule employee
(Instant AP)(Access Rule "employee")# rule any any match app uoutube permit throttle-
downstream 256 throttle-up 256
(Instant AP)(Access Rule "employee")# rule any any match appcategory collaboration permit
(Instant AP)(Access Rule "employee")# end
(Instant AP)# commit apply

Configuring Web Policy Enforcement Service

You can configure the WPE service on an IAP to block certain categories of websites based on your organization
specifications by defining ACL rules by using the Instant UI or the CLI.
In the Instant UI
To configure WPE service:
1. Navigate to Security > Roles.
2. Select any WLAN SSID or wired profile role, and click New in the Access Rules section.
3. Select the rule type as Access Control.
4. To set an access policy based on the web category:
a. Under Service, select Web category and expand the Web categories drop-down list.
273 | Deep Packet Inspection and Application Visibility
Description
Select Disable scanning check box to disable ARM scanning when this rule is triggered.
The selection of the Disable scanning applies only if ARM scanning is enabled. For more
information, see Configuring Radio Settings on page
Select the DSCP tag check box to specify a DSCP value to prioritize traffic when this rule is
triggered. Specify a value within the range of 0–63. To assign a higher priority, specify a
higher value.
Select the 802.1p priority check box to specify an 802.1p priority. Specify a value between
0 and 7. To assign a higher priority, specify a higher value.
260.
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide