D-Link DWL-3600AP

ManagingClientQoSACLs
D-Link UnifiedAccessPointAdministrator’sGuide
November2011 Page131
UnifiedAccessPointAdministrator’sGuide
ManagingClientQoSACLs
ACLsareacollectionofpermitanddenyconditions,calledrules,thatprovidesecuritybyblockingunauthorized
usersandallowingauthorizeduserstoaccessspecificresources.ACLscanblockanyunwarrantedattemptsto
reachnetworkresources.
TheUAPsupportsupto50IPv4,IPv6,andMACACLs.
IPv4andIPv6ACLs
IPACLsclassifytrafficforLayers3and4.
EachACLisasetofupto10rulesapplied totrafficsentfromawirelessclientortobereceivedbyawireless
client.Eachrulespecifieswhetherthecontentsofagivenfieldshouldbeusedtopermitor
denyaccesstothe
network.Rulescanbebasedonvariouscriteriaandmayapplytooneoremorefieldswithina packet,suchas
thesourceordestinationIPaddress,thesourceordestinationL4port,ortheprotocolcarriedinthepacket.
MACACLs
MACACLsareLayer2ACLs.Youcanconfiguretherulestoinspectfieldsofaframesuchasthesourceor
destinationMACaddress,theVLANID,ortheClassofService802.1ppriority.Whenaframeentersorexitsthe
APport(dependingonwhethertheACLisapplied
intheupordowndirection),theAPinspectsthefr ameand
checkstheACLrulesagainstthecontentoftheframe.Ifanyoftherulesmatchthecontent,apermitordeny
actionistakenontheframe.
ACLConfigurationProcess
ConfigureACLsandrulesontheClientQoSACLpage(steps1–5),andthenapplytherulestoaspecifiedVAP
ontheAPQoSParameterspage(step6).
UsethefollowinggeneralstepstoconfigureACLs:
1. SpecifyanamefortheACL.
2. SelectthetypeofACLto
add.
3. AddtheACL
4. AddnewrulestotheACL.
5. Configurethematchcriteriafortherules.
6. ApplytheACLtooneormoreVAPs.
ForanexampleofhowtoconfigureanACL,see“ACLConfiguration”onpage174
ToconfigureanACL,clicktheClientQoSACLtab.