![background image](http://html1.mh-extra.com/html/amx/nxa-wapzd1000/nxa-wapzd1000_operation-reference-manual_2937893079.webp)
Configure Tab
75
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
WLAN ACLs and Block Lists
The NXA-WAPZD1000 provides two methods of controlling access to your wireless LA Ns:
Block List: When users log into an NXA-WAPZD1000 network, their client devices (for example,
laptop computers and handhelds) are recorded and tracked. If, for any reason, you need to block a
client device from network use, you can do so via the Browser-Based Configuration Pages.
Access Control Lists: Access control lists (ACLs) establish which devices are allowed to associate
to a NXA-WAPZD1000-managed AP. By using the Configure > Access Control options, you can
define Layer 2 ACLs (MAC address ACLs), which can then be applied to one or more NXA-
WAPZD1000 WLANs. You can also create L3/L4 ACLs (to restrict access by IP address). ACLs
are either allow-only or deny-only; that is, an ACL can be set up to allow only specified clients or to
deny only specified clients.
Take note of the following NXA-WAPZD1000 rules:
The block list is system-wide and is applied to all WLANs in addition to the per-WLAN ACL. If a
MAC address is listed in the system-wide block list, it will be blocked even if it is an allowed entry
in an ACL. Thus, the block list takes precedence over an ACL.
MAC addresses that are in the deny list are blocked at the AP, not at the NXA-WAPZD1000.
Configuring Access Control Lists
You can build L2/MAC and L3/L4 access control lists to establish which devices are allowed to associate to
the APs. You can configure these options on the Configure > Access Control page.
L2/MAC Access Control
Using the Access Controls configuration options, you define Layer 2/MAC address ACLs, which can then be
applied to one or more WLANs (upon WLAN creation or edit). ACLs are either allow-only or deny-only; that
is, an ACL can be set up to allow only specified clients or to deny only specified clients. MAC addresses that
are in the deny list are blocked at the AP, not at the NXA-WAPZD1000.
To configure an L2/MAC ACL:
1.
Go to Configure > Access Control.
2.
In L2/MAC Access Control, click Create New.
3.
Type a Name for the ACL.
4.
Type a Description of the ACL.
5.
Select the Restriction mode as either allow or deny.
6.
Type a MAC address in the MAC Address text box, and then click Create New to save the address. The
new MAC address that you added appears next to the Stations field. You can enter up to 128 MAC
addresses.
7.
Click OK to save the L2/MAC based ACL.
You can create up to 32 L2/MAC ACL rules, and each rule can contain up to 128 MAC addresses.
Configure Tab - Access Control (Cont.)
Default Mode:
Default Action if no rule is matched. Those rules are
Deny all by default
and
Allow all by default.
Actions:
Click
Edit
to make changes to the access control list, and
Clone
to make
an exact copy of the access control list.
Blocked Clients:
This table lists client devices that are blocked from the WLAN.
MAC Address:
The MAC address of the blocked client.
A system-wide block list is applied to all WLANs in addition to the per- WLAN ACL.
The entries of the system-wide block list are added when the Admin chooses to block
clients from the
Monitor/Current Active Clients
panel. The Admin can remove entries
from the system-wide block list via
Configure > Access Control > Block Clients
list. If a MAC address is listed in the system-wide block list, it will be blocked even if it
is an allowed entry in an ACL list.
Summary of Contents for NXA-WAPZD1000
Page 4: ......
Page 12: ...viii NXA WAPZD1000 ZoneDirector Smart WLAN Controller Table of Contents ...
Page 16: ...Introduction 12 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 130: ...Blocking Client Devices 126 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 146: ...Smart Mesh Networking Best Practices 142 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 153: ...Troubleshooting 149 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...