Users Guide

182 | Remote Access Points Dell PowerConnect ArubaOS 5.0 | User Guide
z Optionally, create a list of network names resolved by corporate DNS servers.
Clients send DNS requests to the corporate DNS server address that it learned from DHCP. If configured for
split tunneling, corporate domains and traffic destined for corporate use the corporate DNS server. For non-
corporate domains and local traffic, other DNS servers can be used.
Configuring the Session ACL
First you need to configure the session ACL. By applying this policy, local traffic remains local, and corporate
traffic is forwarded (tunneled) to the controller.
Using the WebUI
1. Navigate to the Configuration > Security > Access Control > Policies page.
2. Click Add to crete a new policy.
3. Enter the policy name in the Policy Name field.
4. From the Policy Type drop-down list, select IPv4 Session.
5. To create the first rule:
a. Under Rules, click Add.
b. Under Source, select any.
c. Under Destination, select any.
d. Under Service, select service. In the service drop-down list, select svc-dhcp.
e. Under Action, select permit.
f. Click Add.
6. To create the next rule:
a. Under Rules, click Add.
b. Under Source, select any.
c. Under Destination, select alias.
The following steps define an alias representing the corporate network. Once defined, you can use the alias
for other rules and policies. You can also create multiple destinations the same way.
7. Under the alias section, click New. Enter a name in the Destination Name field.
a. Click Add.
b. For Rule Type, select Network.
c. Enter the public IP address of the controller.
d. Enter the Network Mask/Range.
e. Click Add to add the network range.
f. Click Apply. The new alias appears in the Destination menu.
8. Under Destination, select the alias you just created.
9. Under Service, select any.
10. Under Action, select permit.
11. Click Add.
12. To create the next rule:
Note: When creating a new virtual AP profile In the WebUI, you can also configure the SSID at the same time. For information
about AP profiles, see “Configuring Profiles” on page105 in Chapter 6, “Remote Access Points” .