Motorola WiNG 5.6 Reference Manual page 496

6 - 30 WiNG 5.6 Access Point System Reference Guide
Source and Destination
MAC
Action
Precedence
VLAN ID
Match 802.1P
Ethertype
Description
15. Save the changes to the new MAC rule, or reset to the last saved configuration as needed.
16. Define the following parameters for
association to devices for this wireless LAN. If no Association ACL exists, select the
window where new ACL can be created.
17. Select the + Add Row
18. Define the following parameters for
Precedence
Starting MAC Address
Ending MAC Address
Allow/Deny
19. Set the following
ARP Trust
Enter both Source and Destination MAC addresses. The access point uses the source IP
address, destination MAC address as basic matching criteria. Provide a subnet mask if
using a mask.
The following actions are supported:
• Log - Creates a log entry that a Firewall rule has allowed a packet to either be denied
or permitted.
• Mark - Modifies certain fields inside the packet, and then permits them. Therefore,
mark is an action with an implicit permit.
• Mark, Log - Conducts both mark and log functions.
Use the spinner control to specify a precedence for this MAC Firewall rule from
1-1500. Access policies with lower precedence are always applied first to packets.
Enter a VLAN ID representative of the shared SSID each user employs to interoperate
within the network (once authenticated by the access point's local RADIUS server). Set the
VLAN form 1 - 4094.
Configures IP DSCP to 802.1p priority mapping for untagged frames. Use the spinner
control to define a setting from 0 - 7.
Use the drop-down menu to specify an Ethertype of either ipv6, arp, wisp or monitor
8021q. An Ethertype is a two-octet field within an Ethernet frame. It is used to indicate
which protocol is encapsulated in the payload of an Ethernet frame.
Provide a description (up to 64 characters) for this rule to help differentiate it from others
with similar configurations.
Association
button.
Association
Enter a numerical value indicating the precedence of rule execution.
Enter a MAC address to define the start of range. This field is mandatory.
Enter a MAC address to define the end of range.
Every Association ACL rule consists of matching criteria rules. The action defines what to
do with the device if it matches the specified criteria. The following actions are supported:
• Deny - Instructs the Firewall to not to allow the device to associate with this WLAN.
• Permit - Instructs the Firewall to allow the device to associate with this WLAN.
Trust Parameters:
Select this radio button to enable ARP trust on this WLAN. ARP packets received on this
WLAN are considered trusted and information from these packets is used to identify rogue
devices within the network. This setting is disabled by default.
ACL. An Association ACL defines the rules used to allow/deny
ACL:
Create button to display a new