D-Link DWC-1000 User Manual - Page 258

Wireless Controller User Manual Appl y Pol i cy To: Th is refers t o t h e LA N res o u rces man ag ed b y t h e DW C-1000, an d the policy can provide (or prevent) acces s to network res ources , IP addres s , IP network, etc. Pol i cy Name: Th is field is a u n iq u e n ame fo r id en t ify in g t h e p o licy . IP ad d re s s : Required when the governed res ource is identified by its IP addres s or range of ad d res s es . Mas k Leng th: Req u ired wh en t h e g o v ern ed res o u rce is id en t ified b y a ran g e o f addres s es within a s ubnet. Port Range: If the policy governs a type of traffic, t his field is us ed for defining TCP o r UDP p o rt n u mb er(s ) co rrespo n d in g t o t h e g o v ern ed t raffic. Leav in g t h e s t art in g and ending port range blank corres ponds to all UDP and TCP traffic. S ervi ce : Th is is t h e SSL VPN s erv ice mad e av ailab le b y t h is p o licy . T h e s erv ices o ffered are VPN t u n n el, p o rt fo rward in g o r b o t h . Defined Res ources : This policy can provide acces s to s pecific network res ources . Net wo rk res o u rces mu s t b e co n figu red in ad v an ce o f creatin g t he p o licy t o make t h em available for s elect ion as a defined resource. Network res ources are created with the fo llo win g in fo rmat io n Permi s s ion: Th e as sig ned res ources d efin ed b y t his p olicy can b e exp licit ly p ermit t ed or denied. 9.2.1 Using Network Resources Setup > VPN Settings > SSL VPN Server > Resou rces Net wo rk res o u rces are s erv ices o r g ro u p s o f LA N IP ad d res s es t h at are u s ed t o eas ily creat e an d co n fig u re SSL VPN p o licies . Th is s h o rt cu t s av es t ime wh en creat in g s imilar p o licies fo r mu lt ip le remo t e SSL VPN u s ers . A d d in g a Net wo rk Res o u rce in v o lv es creat in g a u n iq u e n ame t o id en t ify t h e res ource and assigning it to one or all of the s upported SSL s ervices . Once this is done, editing one of the created network res ources allows you to configure the object type (either IP address or IP range) as sociated with the s ervice. The Network A d d res s , M as k Len g t h , an d Po rt Ran g e/ Po rt Nu mb er can all b e d efin ed fo r t h is 256