Attaching An Acl On A Wlan Interface/Port - Extreme Networks Summit WM3000 Series Reference Manual

Controller Security
The rules within an ACL are applied to packets based on their precedence value. Rules with lower
precedence are always applied first.
NOTE
If adding an access control entry to an ACL using the controller SNMP interface, Precedence is a required
parameter.
7 Use the Operation drop-down menu (if necessary) to modify the permit, deny or mark designation
for the ACL. If the action is to mark, the packet is tagged for priority.
8 Select the Logging checkbox to generate log messages when a packet has been forwarded, denied or
marked based on the criteria specified in the access lists.
9 If mark is selected from within the Operations drop-down menu, the Attribute to mark field is enabled.
Select the 802.1p (0 - 7) or TOS(0 - 255) or DSCP(0-63) checkbox and define the attribute receiving
priority with this ACL mark designation.
10 From the Filters field, enter the Source Address where the packets are sourced.
11 Select a Source Wildcard/Mask from the drop-down menu.
The Source Wildcard/Mask is the size of the network or host (in mask format). The mask length
defines a match based on the Network / Host.
NOTE
If an Extended IP ACL is used, a Destination Wildcard/Mask and Destination Address are required.
12 Refer to the Status field for the state of the requests made from applet. This field displays error
messages if something goes wrong in the transaction between the applet and the controller.
13 Click OK to use the changes to the running configuration and close the dialog.
14 Click Cancel to close the dialog without committing updates to the running configuration.

Attaching an ACL on a WLAN Interface/Port

Use the Attach-WLAN tab to view and assign an ACL to a WLAN on the controller. If a MAC ACL is
being attached, create a ACL entry to allow an ARP with the least precedence.
NOTE
WLAN based ACLs allows users to enforce rules/ACLs on both the inbound and outbound direction, as opposed to
Layer 2 ACLs, which just support the inbound direction.
To configure a WLAN ACL:
1 Select Security > Wireless Firewall from the main menu tree.
2 Select the Security Policy tab.
3 Select the Attach-WLAN tab.
328
Summit WM3000 Series Controller System Reference Guide