Ruckus Wireless ZoneDirector 3000, Руководство пользователя, Страница: 132 / 430

Controlling Network Access Permissions
Creating Layer 3/Layer 4/IP Address Access Control Lists
132
Ruckus Wireless, Inc.
6 In Rules , click Create New or click Edit to edit an existing rule.
7 Define each access policy by configuring a combination of the following:
• Type : The access privilege (allow or deny) that this policy grants.
• Destination Address : Enter an IP subnet and netmask of the network target
to which you want to allow or deny access. (IP address must be in the format
A.B.C.D/M
, where
M
is the subnet mask.) Otherwise, select Any. For
example, if you enter 192.168.0.1/24, the rule would allow or deny the entire
Class C subnet. To allow/deny a single host, use /32 as the netmask.
• Application : If you select a specific application from the menu, the Protocol
and Destination Port options are automatically filled with the relevant values
and are not configurable.
• Protocol : Enter a network protocol number (0-254), as defined by the IANA
(http://www.iana.org/assignments/protocol-numbers/protocol-
numbers.xhtml) to allow or deny. Otherwise, select Any.
• Destination Port : Enter a valid port number (1-65534) or port range (e.g., 80-
443).
8 Click
OK
to save the ACL.
9 Repeat these steps to create up to 32 L3/L4/IP address-based access control
rules.
Figure 71. Configuring an L3/L4 access control list