D-Link DWL-3600AP - Page 133

ManagingClientQoSACLs
D-Link UnifiedAccessPointAdministrator’sGuide
November2011 Page133
UnifiedAccessPointAdministrator’sGuide
ACLRuleConfiguration
ACLName‐ACLType SelecttheACLtoconfigurewiththenewrule.ThelistcontainsallACLsaddedinthe
ACLConfiguration section.
Rule ToconfigureanewruletoaddtotheselectedACL,selectNewRule.Toaddan
existingruletoanACLorto
modifyarule,selecttherulenumber.
WhenanACLhasmultiplerules,therulesareappliedtothepacketorframeinthe
orderinwhichyouaddthemtotheACL.Thereisanimplicitdenyallruleasthefinal
rule.
Action SpecifieswhethertheACLrulepermitsor
deniesanaction.
•WhenyouselectPermit,theruleallowsalltr afficthatmeetstherulecriteriato
enterorexittheAP(dependingontheACLdirectionyouselect).Trafficthat
doesnotmeetthecriteriaisdropped.
•WhenyouselectDeny,theruleblocksalltrafficthatmeets
therulecriteriafrom
enteringorexitingtheAP(dependingontheACLdirectionyouselect).Traffic
thatdoesnotmeetthecriteriaisforwardedunlessthisruleisthefinalrule.
BecausethereisanimplicitdenyallruleattheendofeveryACL,trafficthatis
not
explicitlypermittedisdropped.
MatchEvery Indicatesthattherule,whicheitherhasapermitordenyaction,willmatchthe
frameorpacketregardlessofitscontents.
Ifyouselectthisfield,youcannotconfigureanyadditionalmatchcriteria.The
MatchEveryoptionisselectedbydefaultforanew
rule.Youmustcleartheoption
toconfigureothermatchfields.
IPv4ACL
Protocol SelecttheProtocolfieldtouseanL3orL4protocolmatchconditionbasedonthe
valueoftheIPProtocolfieldinIPv4packetsortheNextHeaderfieldofIPv6packets.
Onceyouselectthefield,choose
theprotocoltomatchbykeywordorentera
protocolID.
SelectFromList
Selectoneofthefollowingprotocolsfromthelist:
•IP
•ICMP
•IGMP
•TCP
•UDP
MatchtoValue
Tomatchaprotocolthatisnotlistedbyname,entertheprotocolID.
TheprotocolIDisastandardvalueassignedbythe
IANA.Therangeisanumber
from0–255.
SourceIPAddress Selectthisfieldtorequireapacket'ssourceIPaddresstomatchtheaddresslisted
here.EnteranIPaddressintheappropriatefieldtoapplythiscriteria.
Table53:ACLConfiguration(Cont.)
Field Description