Extreme Networks Summit WM3000 Series, Справочное руководство

Страница: 340 / 513

Controller Security
Summit WM3000 Series Controller System Reference Guide
340
Editing an Existing Wireless Filter
Use the Edit screen to modify the properties of an existing filter. This is recommended if an existing
filter contains adequate device address information, but the allow/deny permissions need to be
changed or if only minor changes are required to the starting and ending MAC addresses. If significant
changes are required to a usable filter, consider creating a new one.
To edit an existing filter:
1 Select Security > Wireless Firewall from the main menu tree.
2 Click on the Security Policy tab.
3 Click on the Wireless Filters tab.
4 Select one of the existing ACLs from the filters list.
5 Click the Edit button at the bottom of the screen to launch a screen for editing an ACL.
The user can modify an ACL Index (numerical identifier) for the ACL, and edit the starting an
ending MAC address range for the devices allowed or denied access to the controller managed
network.
6 The MU-ACL Index is used as an identifier for a MAC Address range and allow/deny ACL
designation. The available index range is 1 - 1000. However, the index is not editable, only its
starting/ending MAC range and allow/deny designation. If a new index is needed, create a new
filter.
7 Modify the existing Starting MAC for the target Index or leave the Starting MAC value as is and just
modify the Ending MAC Address or Allow / Deny designation.
8 Modify the existing Ending MAC for the target Index. Enter the same Starting MAC address within
the Ending MAC field to use only the Starting MAC address as either allowed or denied access to the
controller managed network.
9 To associate a zone with the ACL select a Zone ID from the drop-down menu. Zone numbers range
from 1 to 48. Creating zones allows you to associate firewall policies to each zone. All members of