Alcatel-Lucent IAP93 Betriebsanweisung PDF herunterladen (Seite 173)

173 | Roles and Policies AOS-W Instant 6.3.1.1-4.0 | User Guide

3. Create an access rule for the SSID profile with Source NAT action as described in Configuring Source-Based

Routing on page 172. The source NAT pool is configured and source based routing entry is created.

Configuring a Destination NAT Access Rule

Instant supports configuration of the destination NAT rule, which can be used to redirect traffic to the specified IP

address and destination port. Destination-NAT configuration is supported only in the bridge mode without VPN.

You can configure a destination-NAT access rule by using the AOS-W Instant UI or CLI.

In the AOS-W Instant UI

To configure an destination NAT access rule:

1. Navigate to the WLAN wizard or Wired settings window:

l To configure access rules for a WLANSSID, in the Network tab, click New to create a new network profile or

edit to modify an existing profile.

l To configure access rules for a wired profile, More>Wired. In the Wired window, click New under Wired

Networks to create a new network or click Edit to select an existing profile.

2. Click the Access tab.

3. To configure access rules for the network, slide to Network-based. To configure access rules for user roles,

slide to Role-based .

4. To create a new rule for the network, click New. To create an access rule for a user role, select the user role and

then click New. The New Rule window is displayed.

5. In the New Rule window:

6. Select Access control from the Rule type drop-down list.

7. Select destination-NAT from the Action drop-down list, to allow changes to the source IP address.

8. Specify the IP address and port details.

9. Select a service from the list of available services.

10. Select the required option from the Destination drop-down.

11. If required, enable other parameters such as Log, Blacklist, Classify media, Disable scanning, DSCP tag, and

802.1p priority.

12. Click OK and then click Finish.

In the CLI

To configure destination NAT access rule:

(Instant Access Point)(config)# wlan access-rule <access_rule>

(Instant Access Point)(Access Rule "<access_rule>")# rule <dest> <mask> <match> <protocol> <sp

ort> <eport> dst-nat ip <IP-address> [<port>]

(Instant Access Point)(Access Rule "<access_rule>")# end

(Instant Access Point)# commit apply

Configuration Examples for Access Rules

This section provides procedures to create the following access rules.

l Allow POP3 Service to a Particular Server on page 174

l Allow TCP Service to a Particular Network on page 174

l Deny FTP Service except to a Particular Server on page 174

l Deny bootp Service except to a Particular Network on page 175

1 2 ... 168 169 170 171 172 173 174 175 176 177 178 ... 334 335

Keine Kommentare

Alcatel-Lucent IAP93 Betriebsanweisung Seite 173