Ruckus Wireless ZoneDirector 3000, User Manual, Page: 130 / 430

Controlling Network Access Permissions
Creating Layer 2/MAC Address Access Control Lists
130
Ruckus Wireless, Inc.
Controlling Network Access Permissions
ZoneDirector provides several options for controlling client access to your wireless
networks and to other wired/wireless network resources. This section is divided into
the following subsections according to the features on the Configure > Access
Control page:
• Creating Layer 2/MAC Address Access Control Lists
• Creating Layer 3/Layer 4/IP Address Access Control Lists
• Configuring Device Access Policies
• Configuring Client Isolation White Lists
• Configuring Application Denial Policies
• Configuring User Defined Applications
• Configuring Application Port Mapping
• Configuring Precedence Policies
• Blocking Client Devices
Creating Layer 2/MAC Address Access Control Lists
Using the Access Controls configuration options, you can define Layer 2/MAC
address ACLs, which can then be applied to one or more WLANs (upon WLAN
creation or edit). ACLs are either allow-only or deny-only; that is, an ACL can be set
up to allow only specified clients or to deny only specified clients. MAC addresses
that are in the deny list are blocked at the AP, not at ZoneDirector.
To configure an L2/MAC ACL:
1 Go to Configure > Access Control .
2 In L2/MAC Access Control, click Create New .
3 Type a Name for the ACL.
4 Type a Description of the ACL.
5 Select the Restriction mode as either allow or deny.
6 Type a MAC address in the MAC Address text box, and then click Create New
to save the address. The new MAC address that you added appears next to the
Stations field. You can enter up to 128 MAC addresses per ACL.
7 Click OK to save the L2/MAC based ACL.
You can create up to 32 L2/MAC ACL rules and each rule can contain up to 128
MAC addresses. Each WLAN can be configured with one L2 ACL.