Chapter 10
Policy Commands
234
Avaya W310 Command Reference Guide
Step 5.
Add rule 102 to IP policy 301. This rule will deny access to the engineering
server by non-engineering users:
1
Add a rule 102 to IP policy 301:
W310-1(super/ACL 301)#
ip-rule 102
2
Configure rule 102 to filter packets that are not coming from members of the
engineering
user group (identified by policy user group
policy-engr
):
W310-1(super/ACL 301/ip rule 102)#
not source-user-group
policy-engr
3
Configure rule 102 to filter packets that are destined to the engineering server (IP
address of 192.168.0.20):
W310-1(super/ACL 301/ip rule 102)#
destination-ip host
192.168.0.20
4
Configure rule 102 to deny packets that match both criteria (packets that are not
from members of the
engineering
group and that also have a destination address of
the engineering server):
W310-1(super/ACL 301/ip rule 102)#
composite-operation
Deny
5
Exit IP Rule mode:
W310-1(super/ACL 301/ip rule 102)#
exit
W310-1(super/ACL 301)#
Step 6. Configure a default rule. The default rule applies to packets that do not match
any rules in policy 301.
1
Configure a default rule to permit traffic:
W310-1(super/ACL 301)#
ip-rule default
W310-1(super/ACL 301/ip rule default)#
composite-
operation Permit
Note: Use the
show list
command to show all three rules for IP policy 301.
2
Exit IP Rule mode:
W310-1(super/ACL 301/ ip rule default)#
exit
W310-1(super/ ACL 301)#
exit
W310-1(super)#
Step 7.
Enable IP policy 301 on port number 5:
1
Enter AP-Group Interface mode for AP group
group-1
:
W310-1(super)#
interface AP-Group group-1
Summary of Contents for W310
Page 1: ...Avaya W310 WLAN Gateway Command Reference Guide Document No 21 300040 Issue 1 March 31 2004 ...
Page 16: ...Contents xii Avaya W310 Command Reference Guide ...
Page 82: ...Chapter 6 IP Commands 66 Avaya W310 Command Reference Guide ...
Page 102: ...Chapter 7 Layer 2 Switching Commands 86 Avaya W310 Command Reference Guide ...
Page 160: ...Chapter 8 LAP and Radio Card Commands 144 Avaya W310 Command Reference Guide ...
Page 194: ...Chapter 9 Logging and RMON Commands 178 Avaya W310 Command Reference Guide ...
Page 264: ...Chapter 10 Policy Commands 248 Avaya W310 Command Reference Guide ...
Page 350: ...Chapter 13 SNMP Commands 334 Avaya W310 Command Reference Guide ...
Page 376: ...Chapter 15 SSID Commands 360 Avaya W310 Command Reference Guide ...
Page 430: ...Chapter 18 User User Group and RADIUS Commands 414 Avaya W310 Command Reference Guide ...
Page 434: ...Chapter 19 Wireless Domain Commands 418 Avaya W310 Command Reference Guide ...