Using The Cli To Configure Access Control Lists - Cisco SD2008T-NA Configuration Manual

Configuring Access Control Lists
Repeat this procedure to add any additional ACLs.
Step 8
To apply an ACL to a management, AP-manager, or dynamic interface, choose the desired ACL from the
Step 9
ACL Name drop-down box on the interface's Edit page and click Apply. See
information on configuring controller interfaces.
Note
To apply a preauthentication ACL to a WLAN for an external web server, choose the desired ACL from
Step 10
the Preauthentication ACL drop-down box under Security Policies > Web Policy on the WLAN's Edit
page. See
Click Save Configuration to save your changes.
Step 11

Using the CLI to Configure Access Control Lists

Follow these steps to configure ACLs using the controller CLI.
To see all of the ACLs that are configured on the controller, enter this command:
Step 1
show acl summary
To see detailed information for a particular ACL, enter this command:
Step 2
show acl detailed acl_name
To add a new ACL, enter this command:
Step 3
config acl create acl_name
You can enter up to 32 alphanumeric characters for the acl_name parameter.
To add a rule for an ACL, enter this command:
Step 4
config acl rule {
Refer to
Cisco Wireless LAN Controller Configuration Guide
5-12
You cannot apply an ACL to the NPU-CPU interface through the GUI. You can configure this
setting only through the CLI.
Chapter 6 for more information on configuring WLANs.
action acl_name rule_index {permit | deny} |
add acl_name rule_index |
change index acl_name old_index new_index |
destination address acl_name rule_index ip_address netmask |
destination port range acl_name rule_index start_port end_port |
direction acl_name rule_index {in | out | any} |
dscp acl_name rule_index dscp |
protocol acl_name rule_index protocol |
source address acl_name rule_index ip_address netmask |
source port range acl_name rule_index start_port end_port |
swap index acl_name index_1 index_2}
Step 6 in the previous section for explanations of the rule parameters.
Chapter 5 Configuring Security Solutions
Chapter 3 for more
OL-9141-03