Dell W-7030 AOS 6.4.x User Guide - Page 742

Configuring the Session ACL In the WebUI 1. Navigate to the Configuration > Security > Access Control > Policies page. 2. Click Add to create a new policy. 3. Enter the policy name in the Policy Name field. 4. From the Policy Type drop-down list, select IPv4 Session. 5. To create the first rule: a. Under Rules, click Add. b. Under Source, select any. c. Under Destination, select any. d. Under Service, select service. In the service drop-down list, select svc-dhcp. e. Under Action, select permit. f. Click Add. 6. To create the next rule: a. Under Rules, click Add. b. Under Source, select any. c. Under Destination, select any. d. Under Service, select any. e. Under Action, select route, and select the src-nat checkbox. f. Click Add. 7. Click Apply. . If you use a local DHCP server to obtain IP addresses, you must define one additional ACL to permit traffic between clients without source NATing the traffic. Add user alias internal-network any permit before any any any route src-nat. 8. Click the User Roles tab. a. Click Add. b. Enter the Role Name. c. Click Add under Firewall Policies. d. In the Choose from Configured Policies menu, select the policy you just created. e. Click Done. In the CLI Use the following commands: (host) (config) #ip access-list session any any svc-dhcp permit any any any route src-nat If you use a local DHCP server to obtain IP addresses, you must define one additional ACL to permit traffic between clients without source NATing the traffic. Add user alias internal-network any permit before any any any route src-nat: (host) (config) #user-role session-acl Dell Networking W-Series ArubaOS 6.4.x | User Guide Remote Access Points | 742