Motorola Wing 5 Manual

GLOBAL CONFIGURATION COMMANDS 4 - 105
4.1.26 ip
Global Configuration Commands
Configures IP access control lists
Access lists define access to the wireless controller managed network using a set of rules. Each rule specifies an action 
taken when a packet matches a given set of rules. If the action is deny, the packet is dropped. If the action is permit, the 
packet is allowed.
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000...

4 - 106 WiNG CLI Reference Guide
Examples
rfs7000-37FABE(config)#ip access-list test
rfs7000-37FABE(config-ip-acl-test)#
rfs7000-37FABE(config-ip-acl-test)#?
ACL Configuration commands:
  deny     Specify packets to reject
  no       Negate a command or set its defaults
  permit   Specify packets to forward
  clrscr   Clears the display screen
  commit   Commit all changes made in this session
  end      End current mode and change to EXEC mode
  exit     End current mode and down to previous mode
  help...

GLOBAL CONFIGURATION COMMANDS 4 - 107
4.1.27 mac
Global Configuration Commands
Configures MAC access control lists
Access lists define access to the wireless controller managed network using a set of rules. Each rule specifies an action 
taken when a packet matches a given set of rules. If the action is deny, the packet is dropped. If the action is permit, the 
packet is allowed.
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000...

4 - 108 WiNG CLI Reference Guide
Examples
rfs7000-37FABE(config)#mac access-list test
rfs7000-37FABE(config-mac-acl-test)#
rfs7000-37FABE(config-mac-acl-test)#?
MAC Extended ACL Configuration commands:
  deny     Specify packets to reject
  no       Negate a command or set its defaults
  permit   Specify packets to forward
  clrscr   Clears the display screen
  commit   Commit all changes made in this session
  end      End current mode and change to EXEC mode
  exit     End current mode and down to...

GLOBAL CONFIGURATION COMMANDS 4 - 109
4.1.28 management-policy
Global Configuration Commands
Configures a management policy. This policy configures parameters, such as services that run on a device, welcome 
messages, banners, and others.
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
management-policy 
Parameters
• management-policy 
Examples
rfs7000-37FABE(config)#management-policy test...

4 - 110 WiNG CLI Reference Guide
4.1.29 mint-policy
Global Configuration Commands
Configures the global MiNT policy
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
mint-policy global-default
Parameters
• mint-policy global-default
Examples
rfs7000-37FABE(config)#mint-policy global-default
rfs7000-37FABE(config-mint-policy-global-default)#
Related Commands
global-default Uses the global default policy
noRemoves...

GLOBAL CONFIGURATION COMMANDS 4 - 111
4.1.30 nac-list
Global Configuration Commands
Configures a policy, which configures a list of devices that can access a managed network based on their MAC addresses.
Table 4.12NAC List Commands
Command Description Reference
nac-listCreates a NAC list policypage 4-112 

4 - 112 WiNG CLI Reference Guide
4.1.30.1 nac-list
Global Configuration Commands
Configures a Network Access Control (NAC) list that controls access to the wireless controller managed network
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
nac-list 
Parameters
• nac-list 
Examples
rfs7000-37FABE(config)#nac-list test
rfs7000-37FABE(config-nac-list-test)#
rfs7000-37FABE(config-nac-list-test)#?
NAC List Mode...

GLOBAL CONFIGURATION COMMANDS 4 - 113
4.1.30.2 nac-list-mode
Table 4.13 summarizes NAC list mode commands
Table 4.13nac-list-mode commands
Command Description Reference
excludeSpecifies the MAC addresses excluded from the NAC enforcement listpage 4-114
includeSpecifies the MAC addresses included in the NAC enforcement listpage 4-115
noCancels an exclude or an include NAC list rulepage 4-116
clrscrClears the display screenpage 5-3
commitCommits (saves) changes made in the current sessionpage 5-4
doRuns...

4 - 114 WiNG CLI Reference Guide
4.1.30.2.1 exclude
nac-list-mode
Specifies the MAC addresses excluded from the NAC enforcement list
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
exclude  [ precedence |precedence ]
Parameters
• exclude  [ precedence |precedence ]
Examples
rfs7000-37FABE(config-nac-list-test)#exclude 00-40-96-B0-BA-2A precedence 1
rfs7000-37FABE(config-nac-list-test)#
  Specifies a range of MAC...