3Com WX4400 Reference Manual page 271

10 Click Next.
If the access type is Web Portal, the ACEs (ACL rules) that 3WXM will
configure for the Web-Portal service are listed. The ACEs are required to
allow DHCP traffic while blocking all other traffic while a user is being
authenticated. These ACEs are used only during authentication. After the
user is authenticated, the ACEs are not used.
If you need to add ACEs, continue with this step. Otherwise, click Next
and go to "Modifying Access Rules" on page 271 or click Finish to save
the changes and close the wizard.
To add an ACE, click Add Rule. 3WXM adds an ACE to the end of the
list. The ACE matches on all source and destination IP addresses and
denies them.
To modify an ACE, select the part of the ACE you want to modify, and
edit or select the new value. (For information about ACE settings, see
"Viewing and Configuring ACLs" on page 230.)
Do not change the deny rule at the bottom of the ACL. This rule must be
present and the capture option must be used with the rule. If the rule
does not have the capture option, the Web Portal user never receives a
login page.
11 To modify access rules, click Next and go to "Modifying Access Rules".
Otherwise, click Finish.
Modifying Access Rules
1 If you have not already done so, access the Access Rules Configuration
page for the service profile:
a Select the service profile in the Wireless Service Profiles table.
b Select one of the following in the Task List panel:
802.1X Access
MAC Access (used for voice)
Web Portal Access
Open Access
Access Rules
c If you selected Access Rules, go to step 2. Otherwise, click Next to
advance through the wizard until you reach the Access Rules
Configuration page.
2 To create a new rule, click Create.
Viewing and Configuring Wireless Services 271