Dell W-Series 207 Instant 6.4.3.1-4.2 User Guide - Page 191
In the CLI, Example
View all Dell W-Series 207 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 191 highlights
Table 37: Access Rule Configuration Parameters Service Category Description specify the IP address and netmask for the destination network. l except to a network-Access is allowed or denied to networks other than the specified network. After selecting this option, specify the IP address and netmask of the destination network. l to domain name-Access is allowed or denied to the specified domains. After selecting this option, specify the domain name in the Domain Name text box. Log Select this checkbox if you want a log entry to be created when this rule is triggered. Instant supports firewall based logging. Firewall logs on the W-IAPs are generated as security logs. Blacklist Select the Blacklist checkbox to blacklist the client when this rule is triggered. The blacklisting lasts for the duration specified as Auth failure blacklist time on the Blacklisting tab of the Security window. For more information, see Blacklisting Clients on page 183. Classify media Select the Classify media checkbox to prioritize video and voice traffic. When enabled, a packet inspection is performed on all non-NAT traffic and the traffic is marked as follows: l Video: Priority 5 (Critical) l Voice: Priority 6 (Internetwork Control) Disable scanning Select Disable scanning checkbox to disable ARM scanning when this rule is triggered. The selection of the Disable scanning applies only if ARM scanning is enabled, For more information, see Configuring Radio Settings on page 257. DSCP tag Select the DSCP tag checkbox to specify a DSCP value to prioritize traffic when this rule is triggered. Specify a value within the range of 0 to 63. To assign a higher priority, specify a higher value. 802.1p priority Select the 802.1p priority checkbox to specify an 802.1p priority. Specify a value between 0 and 7. To assign a higher priority, specify a higher value. 6. Click OK and then click Finish. In the CLI To configure access rules: (Instant AP)(config)# wlan access-rule (Instant AP)(Access Rule )#rule { {permit|deny|src-nat|dst-nat{ | }}[] (Instant AP)(Access Rule )# end (Instant AP)# commit apply Example (Instant AP)(config)# wlan access-rule employee (Instant AP)(Access Rule "employee")# rule 10.17.88.59 255.255.255.255 match 6 4343 4343 log classify-media (Instant AP)(Access Rule "employee")# rule 192.0.2.8 255.255.255.255 invert 6 110 110 permit (Instant AP)(Access Rule "employee")# rule 192.0.2.2 255.255.255.0 192.0.2.7 255.255.255.0 match tcp 21 21 deny Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Roles and Policies | 191