Working with L2 Access Control Policies
Another method to control access to the network is by defining Layer 2/MAC address access
control lists (ACLs), which can then be applied to one or more WLANs or WLAN groups.
L2 ACLs are either allow-only or deny-only; that is, an ACL can be set up to allow only specified
clients or to deny only specified clients. MAC addresses that are in the deny list are blocked at
the AP.
Creating an L2 Access Policy
To control access to the network, define the Layer 2/MAC address access control lists (ACLs),
which can then be applied to one or more WLANs or WLAN groups.
Follow these steps to create an L2 access policy.
1. Go to Configuration>AP Zones.
2. Click the AP zone for which you want to create an L2 ACL.
3. On the AP Zones submenu, click L2 Access Control.
4. Click Create New.
The Create New L2 Access Control Service form appears.
5. In Name, type a name for this policy.
6. In Description, type a short description for this policy.
7. In Restriction, select the default action that the controller will take if no rules are matched.
Available options include:
• Only allow all stations listed below
• Only block all stations listed below
8. In MAC Address (under the Rules section), type the MAC address to which this L2 access
policy applies.
9. Click Add.
10. To add another MAC address, repeat steps 8 to 9.
11. When you have finished adding all the MAC addresses that you need to add, click OK.
The page refreshes, and then the L2 access policy that you created appears in the L2 Access
Control Services section.
You have completed creating an L2 access policy.
SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide
87
Managing Ruckus Wireless AP Zones
Working with L2 Access Control Policies
To Next Page
Loading...
