WESM zl Management and Configuration Guide WT.01.XX and greater

7-16
Access Control Lists (ACLs)
Configuring ACLs
6. If you selected the mark operation in step 4, under Attribute to mark, select
one of the following:
• 802.1p—Then specify the traffic service class value, from 0 through 7.
• TOS—Then specify the value for the TOS octet, from 0 through 255.
Standard DSCP values are from 0 through 63.
Remember that higher values typically mark traffic for better QoS.
7. In the Source Wildcard/Mask field, use the drop-down menu to select one
of the following:
• any—The rule will apply to traffic from any IP address. (This allows
you to filter traffic based on fields other than the source IP address.)
• host—The rule will apply specifically to a single source IP address.
Enter this address in the Source Address field.
• numbers 1 through 31—The rule selects traffic from an entire subnet-
work with the specified prefix length. Enter the subnetwork’s net-
work address in the Source Address field.
For example, you select 24 in the Source Wildcard/Mask field and
192.168.8.0 in the Source Address field. The rule matches only the
first 24 bits (three octets) of source IP addresses against the specified
source address. Any packet from the 192.168.8.0/24 subnetwork is
selected.
8. If you plan to apply this rule to the downlink port, you can optionally
specify the WLAN. In the Wlan Index field, specify the index number
(from 1 through 256) of the WLAN from which traffic must arrive.
If you do not specify a WLAN index, the rule will apply to any traffic that
matches other filters.
Note The WLAN filter only takes effect if you apply this ACL to a physical interface.
However, you should never specify a WLAN index for an ACL that you apply
to the uplink port. Traffic from the uplink port is not typically marked for a
WLAN, so the rule will not select any traffic.
9. Click the OK button to apply the rule.
The rule is now listed in the Associated Rules section of the Security > ACLs >
Configuration screen (when the corresponding ACL is selected).
Remember to click the Save link to preserve the configuration.