Motorola Wing 5 Manual

ASSOCIATION-ACL-POLICY 11 - 5
11.1.2 no
association-acl-policy
Negates a command or sets its default
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
no [deny|permit]
no deny  precedence 
no deny   precedence 
no permit  precedence 
no permit   precedence 
Parameters
• deny  precedence 
• deny   precedence 
no deny Removes a single device or a set of devices from the deny list
 To remove a single device, enter...

11 - 6 WiNG CLI Reference Guide
• no permit  precedence 
• no permit   precedence 
Examples
rfs7000-37FABE(config-assoc-acl-test)#show context
association-acl-policy test
 deny 11-22-33-44-55-01 11-22-33-44-55-FF precedence 150
 deny 11-22-33-44-56-01 11-22-33-44-56-01 precedence 160
 permit 11-22-33-44-66-01 11-22-33-44-66-FF precedence 170
 permit 11-22-33-44-67-01 11-22-33-44-67-01 precedence 180
rfs7000-37FABE(config-assoc-acl-test)#no deny 11-22-33-44-56-01 precedence 160...

ASSOCIATION-ACL-POLICY 11 - 7
11.1.3 permit
association-acl-policy
Specifies devices permitted access to the wireless controller managed network. Devices are permitted access based on 
their MAC address. A single MAC address or a range of MAC addresses can be specified. This command also sets the 
precedence on how permit list rules are applied. Up to a thousand (1000) deny rules can be defined.
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000...

11 - 8 WiNG CLI Reference Guide
Examples
rfs7000-37FABE(config-assoc-acl-test)#show context
association-acl-policy test
 deny 11-22-33-44-55-01 11-22-33-44-55-FF precedence 150
 deny 11-22-33-44-56-01 11-22-33-44-56-01 precedence 160
rfs7000-37FABE(config-assoc-acl-test)#
rfs7000-37FABE(config-assoc-acl-test)# permit 11-22-33-44-66-01 11-22-33-44-66-FF 
precedence 170
rfs7000-37FABE(config-assoc-acl-test)# permit 11-22-33-44-67-01 precedence 180
rfs7000-37FABE(config-assoc-acl-test)#show context...

CHAPTER 12 ACCESS-LIST
This chapter summarizes IP and MAC access list commands in detail.
Access lists control access to the network using a set of rules. Each rule specifies an action taken when a packet matches 
a given set of rules. If the action is deny, the packet is dropped. If the action is permit, the packet is allowed. The controller 
supports the following ACLs:
 IP access lists
 MAC access lists
Use IP and MAC commands under the global configuration to create an access list.
 When the access...

12 - 2 WiNG CLI Reference Guide
mac-access-list
rfs7000-37FABE(config)#mac access-list test
rfs7000-37FABE(config-mac-acl-test)#?
MAC Extended ACL Config commands:
  deny     Specify packets to reject
  no       Negate a command or set its defaults
  permit   Specify packets to forward
  clrscr   Clears the display screen
  commit   Commit all changes made in this session
  end      End current mode and change to EXEC mode
  exit     End current mode and down to previous mode
  help     Description of...

ACCESS-LIST 12 - 3
12.1 ip-access-list
ACCESS-LIST
Table 12.1 summarizes commands under the IP access list mode
Table 12.1IP Access List commands
Command Description Reference
denySpecifies packets to rejectpage 12-4
noNegates a command or sets its defaultpage 12-9
permitPermits specific packetspage 12-15
clrscrClears the display screenpage 5-3
commitCommits (saves) changes made in the current sessionpage 5-4
doRuns commands from EXEC modepage 4-66
endEnds and exits the current mode and moves to the...

12 - 4 WiNG CLI Reference Guide
12.1.1 deny
ip-access-list
Specifies packets to reject
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
deny [icmp|ip|proto|tcp|udp]
deny ip [|any|host ] [|any|host ] 
[log rule-precedence |rule-precedence ] 
{rule-description }
deny icmp [|any|host ] [|
any|host ]   [log rule-precedence |
rule-precedence ] {rule-description }
deny proto [||eigrp|gre|igmp|igp|ospf|vrrp] 
[|any|host...

ACCESS-LIST 12 - 5
• deny ip [|any|host ] [|any|host ] 
[log rule-precedence |rule-precedence ] 
{rule-description }
any Identifies all devices as the source to deny access
host  Identifies a specific host as the source to deny access
  – Specify the host IP address.
 Sets the IP address and mask as the destination to deny access
any Identifies all devices as the destination to deny access
host  Identifies a specific host as the destination to deny access
  – Specify the host IP address.
 Defines the...

12 - 6 WiNG CLI Reference Guide
• deny proto [||eigrp|gre|igmp|igp|ospf|vrrp] 
[|any|host ] [|any|host ] 
[log rule-precedence |rule-precedence ] 
{rule-description }
• deny [tcp|udp] [|any|host ] [eq |
range  ] [|any|host ] 
rule-precedence  Sets the rule precedence. Rules are checked in an increasing order of precedence
  – Specify the rule precedence from 1 - 5000.
rule-description 
Optional. Defines the rule description
  – Provide a description of the rule. The description should not 
exceed 128...