![background image](http://html1.mh-extra.com/html/amx/nxa-wapzd1000/nxa-wapzd1000_operation-reference-manual_2937893080.webp)
Configure Tab
76
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
L3/L4 Access Control
In addition to L2/MAC based ACL, the NXA-WAPZD1000 also provides access control options at the Layer 3
and Layer 4 levels. This means that you can configure the access control options based on a set of criteria,
including:
Destination Address
Application
Protocol
Destination Port
To create an L3/L4/IP address based ACL:
1.
Go to Configure > Access Control.
2.
In L3/4/IP address Access Control, click Create New.
3.
Type a Name for the ACL.
4.
Type a Description for the ACL.
5.
In Default Mode, set the default access privilege (allow all or deny all) that you want to grant all users by
default.
6.
In Rules, click Create New or click Edit to edit an existing rule.
7.
Define each access policy by configuring a combination of the following:
Type: The access privilege (allow or deny) that this policy grants.
Destination Address: If you have a specific IP address to which you want to allow or deny access,
type it here. Otherwise, select Any. (IP addresses must be in the format: A.B.C.D/M, where M is the
bitmask).
Application: If you have a specific application to which you want to allow or deny access, select it
from the menu. Otherwise, select Any. If you select an option here besides Any, the Protocol and
Destination Port options are disabled.
Protocol: If you have a network protocol that you want to allow or deny, select it from the menu.
Otherwise, click Any.
Destination Port: If you have a specific destination port to which you want to allow or deny access,
select it from the menu. Otherwise, select Any.
8.
Repeat these steps to create up to 32 L3/L4/IP address-based access control rules.
9.
Click OK to save the ACL.
NXA-WAPZD1000 Management ACL
The NXA-WAPZD1000 also includes an access control feature for controlling access to the Browser-Based
Configuration Pages. The Management Access Control interface is located on the Configure > System screen.
Options include limiting access by subnet, single IP address and IP address range.
Summary of Contents for NXA-WAPZD1000
Page 4: ......
Page 12: ...viii NXA WAPZD1000 ZoneDirector Smart WLAN Controller Table of Contents ...
Page 16: ...Introduction 12 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 130: ...Blocking Client Devices 126 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 146: ...Smart Mesh Networking Best Practices 142 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 153: ...Troubleshooting 149 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...