Chapter 10
Policy Commands
246
Avaya W310 Command Reference Guide
W310-1(super/AP-Group group-1)#
ip qos-group 401 in
3
Enable QoS policy 402 for outgoing traffic:
W310-1(super/AP-Group group-1)#
ip qos-group 402 out
4
Exit AP-Group Interface mode:
W310-1(super/AP-Group group-1)#
exit
W310-1(super)#
Setting Policy: Example 5
This example shows how to define the policies for the
default
user group.
Users first try to associate with the user-group information from the RADIUS server. If that
fails, the user is associated with the user-group with SSID name. If that information is not
available, the user is placed in the user-group
default
. This is why it is important to configure
policies for the
default
user group. The policy-group for the default user-group is
by-ip-
address
.
The following policy denies
default
users access to networks other than the 192.168.8.x
network.
Step 1: Create an IP policy:
1
Create an access control list that has an index number of 305:
W310-1(super)#
ip access-control-list 305
Step 2. Add rule 101 to IP policy 305. This rule will allow default users to access the
192.168.8.x network only:
2
Add rule 101 to ACL 305:
W310-1(super/ACL 305)#
ip-rule 101
3
Configure rule 101 to filter packets that are coming from members of the
default
user group (
by-ip-address
is the policy user group for the
default
user group):
W310-1(super/ACL 305/ip rule 101)#
source-user-group by-
ip-address
4
Configure rule 101 to filter packets that are destined to the 192.168.8.x network:
W310-1(super/ACL 305/ip rule 101)#
destination-ip
192.168.8.0 0.0.0.255
5
Configure rule 101 to permit packets that match both criteria:
W310-1(super/ACL 305/ip rule 101)#
composite-operation
Permit
6
Exit IP Rule mode for rule 101:
W310-1(super/ACL 305/ip rule 101)#
exit
Содержание W310
Страница 1: ...Avaya W310 WLAN Gateway Command Reference Guide Document No 21 300040 Issue 1 March 31 2004 ...
Страница 16: ...Contents xii Avaya W310 Command Reference Guide ...
Страница 82: ...Chapter 6 IP Commands 66 Avaya W310 Command Reference Guide ...
Страница 102: ...Chapter 7 Layer 2 Switching Commands 86 Avaya W310 Command Reference Guide ...
Страница 160: ...Chapter 8 LAP and Radio Card Commands 144 Avaya W310 Command Reference Guide ...
Страница 194: ...Chapter 9 Logging and RMON Commands 178 Avaya W310 Command Reference Guide ...
Страница 264: ...Chapter 10 Policy Commands 248 Avaya W310 Command Reference Guide ...
Страница 340: ...Chapter 12 Wireless Authentication and Security Commands 324 Avaya W310 Command Reference Guide ...
Страница 350: ...Chapter 13 SNMP Commands 334 Avaya W310 Command Reference Guide ...
Страница 376: ...Chapter 15 SSID Commands 360 Avaya W310 Command Reference Guide ...
Страница 430: ...Chapter 18 User User Group and RADIUS Commands 414 Avaya W310 Command Reference Guide ...
Страница 434: ...Chapter 19 Wireless Domain Commands 418 Avaya W310 Command Reference Guide ...
Страница 440: ...386 Avaya W310 Command Reference Guide ...