1.3 ACL Configuration
The ACL in this scenario prevents wireless clients from accessing the web management
interface of the switch. All other types of traffic is allowed.
1. From the LAN menu, navigate to the Access Control Lists > IP ACL > Access
Profile Settings page.
2. From the IP ACL field, select Create New Extended ACL from the drop-down
menu.
3. Enter 100 in the ACL ID field, then click Submit.
4. From the Rule Configuration page, enter 1 as the Rule ID, Deny as the Action, and
False for Match Every, then click Submit.
5. The screen refreshes with additional fields. Click the Configure button associated
with the appropriate fields and enter the following criteria to deny HTTP traffic from
clients on the Guest Network to the Switch and APs:
• Protocol Keyword: IP
• Source IP Address: 10.90.91.1
• Source IP Mask: 0.0.0.255 (This is a wildcard mask)
• Destination IP Address: 10.90.90.1
• Destination IP Mask: 0.0.0.255
• Destination L4 Port: http
6. Create a new rule, enter 2 as the Rule ID, Permit as the Action, and True for Match
Every, then click Submit. The reason for this second rule is that an ACL has an
implicit “deny all” rule at the end. ACL rules are checked in order and the action of
the first to match the flow is taken. If no match occurs, the packet will be dropped.
To Next Page
Loading...
Need help?
General
