WESM zl Management and Configuration Guide WT.01.XX and greater

1-42
Introduction
ProCurve Wireless Edge Services zl Module
• The Wireless Edge Services zl Module receives the traffic on its uplink
port from the wireless services-enabled switch; the traffic is tagged
for the VLAN interface.
■ You can apply one IP ACL and one MAC extended ACL to each physical
interface.
The two physical interfaces are the internal uplink and downlink ports.
The ACL applies to all traffic that arrives on the port in any VLAN. In
addition to imposing other filters, an ACL applied to the downlink port
can filter traffic according to WLAN.
To control traffic that arrives on the downlink port with a MAC extended
ACL, the Wireless Edge Services zl Module examines the 802.11 header
and the Ethernet header after the packet is bridged. For traffic that arrives
on the uplink port, the MAC extended ACL applies to the Ethernet header.
Figure 1-15 shows where ACLs affect traffic. For more information about
ACLs, see Chapter 7: “Access Control Lists (ACLs).”
Figure 1-15. Applying ACLs to Interfaces