Configuring The Firewall - Extreme Networks Summit WM3000 Series Reference Manual

Consider the following when adding rules:
Every ACL entry in an ACL is associated with a precedence value unique for every entry. You
●
cannot enter two different entries in an ACL with the same precedence value. This value can be
between 1 and 5000. An ACE in an ACL is associated with a unique precedence value. No two
ACE's can have the same precedence value.
Specifying a precedence value with each ACL entry is not mandatory. If you do not want to specify
●
one, the system automatically generates a precedence value starting with 10. Subsequent entries are
added with precedence values of 20, 30 and so on. 10 is the default offset between any two rules in
an ACL. However, if the user specifies a precedence value with an entry, that value overrides the
default value. The user can also add an entry in between two subsequent entries (for example, in
between 10 and 20).
If an entry with a max precedence value of 5000 exists, you cannot add a new entry with a higher
●
precedence value. In such a case, the system displays an error stating "Rule with max precedence
value exists". Either delete the entry or add new entries with precedence values less than 5000. A
user can add a maximum of 500 ACE's in an ACL.
Rules within an ACL are displayed in an ascending order of precedence.
●
NOTE
ACEs with lower precedence are always applied first to packets. Therefore, it is advised to add more specific entries
in the ACL first then the general ones. While displaying the ACL, the entries are displayed in an ascending order of
precedence.

Configuring the Firewall

Configure the Firewall to create either standard/extended ip or extended MAC access control lists.
To configure the Firewall:
1 Select Security > Wireless Firewall from the main tree menu.
2 Select the Configuration tab.
3 Select the ACL tab.
4 Add a new ACL entry as explained in
5 The Configuration tab consists of the following two fields:
Summit WM3000 Series Controller System Reference Guide
"Adding a New ACL" on page 324.
323