WESM zl Management and Configuration Guide WT.01.28 and greater

7-15
Access Control Lists (ACLs)
Configuring ACLs
6. If you selected the mark operation in step 4, under Attribute to mark, select one
of the following:
• 802.1p—Then specify the traffic service class value, from 0 through 7.
• TOS—Then specify the value for the TOS octet, from 0 through 255.
Standard DSCP values are from 0 through 63.
Remember that higher values typically mark traffic for better QoS.
7. In the Source Wildcard/Mask field, use the drop-down menu to select one of
the following:
• any—The rule will apply to traffic from any IP address. (This allows you
to filter traffic based on fields other than the source IP address.)
• host—The rule will apply specifically to a single source IP address. Enter
this address in the Source Address field.
• numbers 1 through 31—The rule selects traffic from an entire subnetwork
with the specified prefix length. Enter the subnetwork’s network address in
the Source Address field.
For example, you select 24 in the Source Wildcard/Mask field and
192.168.8.0 in the Source Address field. The rule matches only the first 24
bits (three octets) of source IP addresses against the specified source
address. Any packet from the 192.168.8.0/24 subnetwork is selected.
8. If you plan to apply this rule to the downlink port, you can optionally specify
the WLAN. In the Wlan Index field, specify the index number (from 1
through 256) of the WLAN from which traffic must arrive.
If you do not specify a WLAN index, the rule will apply to any traffic that
matches other filters.
Note The WLAN filter only takes effect if you apply this ACL to a physical interface.
However, you should never specify a WLAN index for an ACL that you apply to the
uplink port. Traffic from the uplink port is not typically marked for a WLAN, so the
rule will not select any traffic.
9. Click the OK button to apply the rule.
The rule is now listed in the Associated Rules section of the Security > ACLs >
Configuration screen (when the corresponding ACL is selected).
Remember to click the Save link to preserve the configuration.