Cisco WAP121 Administration Manual page 114

Client Quality of Service
ACLs
STEP 3
STEP 4
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE
IPv4 and IPv6 ACLs control access to network resources based on Layer 3
and Layer 4 criteria. MAC ACLs control access based on Layer 2 criteria.
Click Add ACL.
The page displays additional fields for configuring the ACL.
Configure the rule parameters:
• ACL Name - ACL Type—The ACL to configure with the new rule. The list
contains all ACLs added in the ACL Configuration section.
• Rule—The action to be taken:
- Select New Rule to configure a new rule for the selected ACL.
- If rules already exist (even if created for use with other ACLs), you can
select the rule number to add the rule to the selected ACL or to modify
the rule.
When an ACL has multiple rules, the rules are applied to the packet or frame
in the order in which you add them to the ACL. There is an implicit deny all
rule as the final rule.
• Action—Whether the ACL rule permits or denies an action.
When you select Permit, the rule allows all traffic that meets the rule criteria
to enter or exit the WAP device (depending on the ACL direction you select).
Traffic that does not meet the criteria is dropped.
When you select Deny, the rule blocks all traffic that meets the rule criteria
from entering or exiting the WAP device (depending on the ACL direction
you select). Traffic that does not meet the criteria is forwarded unless this
rule is the final rule. Because there is an implicit deny all rule at the end of
every ACL, traffic that is not explicitly permitted is dropped.
• Match Every Packet—If selected, the rule, which either has a permit or deny
action, will match the frame or packet regardless of its contents.
If you select this field, you cannot configure any additional match criteria. The
Match Every option is selected by default for a new rule. You must clear the
option to configure other match fields.
For IPv4 ACLs, configure these parameters:
• Protocol—The Protocol field to use an L3 or L4 protocol match condition
based on the value of the IP Protocol field in IPv4 packets or the Next Header
field of IPv6 packets.
7
114