Cisco Small Business WAP551 Administration Manual page 114

Client Quality of Service
ACL
STEP 3
STEP 4
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point
• ACL Name—A name to identify the ACL. The ACL name can include from 1
to 31 alphanumeric characters and the following special characters: hyphen,
underscore, backslash, and colon. Spaces are not allowed.
• ACL Type—The type of ACL to configure:
- IPv4
- IPv6
- MAC
IPv4 and IPv6 ACLs control access to network resources based on Layer 3
and Layer 4 criteria. MAC ACLs control access based on Layer 2 criteria.
Click Add ACL.
The page shows additional fields for configuring the ACL.
Configure the rule parameters:
• ACL Name - ACL Type—The ACL to configure with the new rule. The list
contains all ACLs added in the ACL Configuration section.
• Rule—The action to be taken:
- Select New Rule to configure a new rule for the selected ACL.
- If rules already exist (even if created for use with other ACLs), you can
select the rule number to add the rule to the selected ACL or to modify
the rule.
When an ACL has multiple rules, the rules are applied to the packet or frame
in the order in which you add them to the ACL. There is an implicit deny all
rule as the final rule.
• Action—Whether the ACL rule permits or denies an action.
When you select Permit, the rule allows all traffic that meets the rule criteria
to enter or exit the WAP device (depending on the ACL direction you select).
Traffic that does not meet the criteria is dropped.
When you select Deny, the rule blocks all traffic that meets the rule criteria
from entering or exiting the WAP device (depending on the ACL direction
you select). Traffic that does not meet the criteria is forwarded unless this
rule is the final rule. Because there is an implicit deny all rule at the end of
every ACL, traffic that is not explicitly permitted is dropped.
• Match Every Packet—If selected, the rule, which either has a permit or deny
action, matches the frame or packet regardless of its contents.
7
113