Appendix E Best Practices; Acl Configuration To Reduce The Amount Of Broadcast Or Multicast Traffic In The Network - Motorola WiNG 4.4 Reference Manual

APPENDIX E BEST PRACTICES

This document lists a set of best practices that can improve the performance of your network and the devices that
constitute it.
E.1 ACL configuration to reduce the amount of broadcast or multicast traffic in
the network
Use these commands to create an extended MAC access list with the name IPV6-BLOCK. From the (config) mode execute
the following commands.
mac access-list extended IPV6-BLOCK
permit any any type ip rule-precedence 10
permit any any type arp rule-precedence 60
Use these commands to create an extended IP access list with the name BCMC-CTRL-VOICE. From the (config) mode,
execute the following commands.
ip access-list extended BCMC-CTRL-VOICE
permit ip any host 224.0.0.1 rule-precedence 20
permit tcp any any rule-precedence 30
permit udp any eq 67 any eq bootpc rule-precedence 40
deny ip any 224.0.0.0/4 rule-precedence 50
deny udp any range 137 138 any range 137 138 rule-precedence 60
deny ip any host 255.255.255.255 rule-precedence 80
permit ip any any rule-precedence 100
These rules must be applied in the OUT direction. For example:
wlan-acl <idx> BCMC-CTRL-VOICE out
wlan-acl <idx> IPV6-Block out
where <IDX> is the index of the WLAN on which the ACL must be applied.