Users Guide

282 | Roles and Policies Dell PowerConnect ArubaOS 5.0 | [User Guide
In the WebUI
1. Navigate to the Configuration > Security > Access Control > Policies page on the WebUI.
2. Click Add to create a new policy.
3. Enter web-only for the Policy Name.
4. To configure a firewall policy, select IPv4 Session for Policy Type.
5. Click Add to add a rule that allows HTTP traffic.
a. Under Service, select service from the drop-down list.
b. Select svc-http from the scrolling list.
c. Click Add.
6. Click Add to add a rule that allows HTTPS traffic.
a. Under Service, select service from the drop-down list.
b. Select svc-https from the scrolling list.
c. Click Add.
7. Click Apply to apply this configuration. The policy is not created until the configuration is applied.
In the CLI
ip access-list session web-only
any any svc-http permit
any any svc-https permit
Creating an ACL White List
The ACL White List consists of rules that explicitly permit or deny session traffic from being forwarded to or
blocked from the controller. The white list protects the controller during traffic session processing by prohibiting
traffic from being automatically forwarded to the controller if it was not specifically denied in a blacklist. The
maximum number of entries allowed in the ACL White List is 64. To create an ACL white list, you must first
define a white list bandwidth contract, and then assign it to an ACL.
Configuring a White List Bandwidth Contract in the WebUI
1. Navigate to the Configuration > Advanced Services > Stateful Firewall > White List BW Contracts page.
2. Click Add to create a new contract.
3. In the White list contract name field, enter the name of a bandwidth contract.
4. The Bandwidth Rate field allows you to define a bandwidth rate in either kbps or Mbps. Enter a rate value the
Bandwidth rate field, then click the drop-down list and select either kbps or Mbps.
5. Click Done.
Configuring the ACL White List in the WebUI
1. Navigate to the Configuration > Stateful Firewall> ACL White List page.
2. To add an entry, click the Add button at the bottom of the page. The Add New Protocol section displays.
3. Click the Action drop-down list and select Permit or Deny. Permit allows session traffic to be forwarded to
the controller while Deny blocks session traffic.
4. In the IP Protocol Number field, enter the number for a protocol used by session traffic.
Note: Rules can be re-ordered by using the up and down buttons provided for each rule.