Alcatel-Lucent IAP93 Betriebsanweisung PDF herunterladen (Seite 171)

171 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User Guide

Field Description

l To a network—Access is allowed or denied to a network. After selecting this option, specify

the IP address and netmask for the destination network.

l Except to a network—Access is allowed or denied to networks other than the specified

network. After selecting this option, specify the IP address and netmask of the destination

network.

l To domain name—Access is allowed or denied to the specified domains. After selecting

this option, specify the domain name in the Domain Name text box.

Log

Select this check box if you want a log entry to be created when this rule is triggered. Instant

firewall supports firewall based logging function. Firewall logs on the OAW-IAPs are

generated as syslog messages.

Blacklist

Select the Blacklist check box to blacklist the client when this rule is triggered. The

blacklisting lasts for the duration specified as Auth failure blacklist time on the Blacklisting tab

of the Security window. For more information, see Blacklisting Clients on page 158.

Classify media

Select the Classify media check box to prioritize video and voice traffic. When enabled, a

packet inspection is performed on all non-NAT traffic and the traffic is marked as follows:

l Video: Priority 5 (Critical)

l Voice: Priority 6 (Internetwork Control)

Disable scanning Select Disable scanning check box to disable ARM scanning when this rule is triggered.

The selection of the Disable scanning applies only if ARM scanning is enabled, For more

information, see Configuring Radio Settings for an OAW-IAP on page 218.

DSCP tag Select the DSCP tag check box to specify a DSCP value to prioritize traffic when this rule is

triggered. Specify a value within the range of 0 to 63. To assign a higher priority, specify a

higher value.

802.1p priority Select the 802.1p priority check box to specify an 802.1p priority. Specify a value between 0

and 7. To assign a higher priority, specify a higher value.

Table 30:

Access Rule Configuration Parameters

6. Click OK and then click Finish.

In the CLI

To configure access rules:

(Instant Access Point)(config)# wlan access-rule <access-rule-name>

(Instant Access Point)(Access Rule <Name>)# rule <dest> <mask> <match> <protocol> <start-port>

<end-port> {permit |deny | src-nat | dst-nat {<IP-address> <port> | <port>}}[<option1…option

9>]

(Instant Access Point)(Access Rule <Name>)# end

(Instant Access Point)# commit apply

Configuring Network Address Translation

Network Address Translation (NAT) is the process of modifying network address information when packets pass

through a routing device. The routing device acts as an agent between the public (the Internet) and private (local

network), which allows translation of private network IP addresses to a public address space.

AOS-W Instant supports the NAT mechanism to allow a routing device to use the translation tables to map the

private addresses into a single IP address and packets are sent from this address, so that they appear to originate

from the routing device. Similarly, if the packets are sent to the private IP address, the destination address is

translated as per the information stored the translation tables of the routing device.

1 2 ... 166 167 168 169 170 171 172 173 174 175 176 ... 334 335

Kommentare zu diesen Handbüchern

Keine Kommentare

Alcatel-Lucent IAP93 Betriebsanweisung Seite 171

Kommentare zu diesen Handbüchern