Reference Guide (Supporting software release 5.5.0.0 and later) Owner manual

886 Brocade Mobility RFS Controller CLI Reference Guide
53-1003098-01
11
association-acl-policy
ASSOCIATION-ACL-POLICY
Table 9 summarizes association ACL policy configuration commands.
deny
association-acl-policy
Creates a list of devices denied access to the managed network. Devices are identified by their
MAC address. A single MAC address or a range of MAC addresses can be denied access. This
command also sets the precedence on how deny rules are applied. Up to a thousand (1000) deny
rules can be defined for every association ACL policy. Each rule has a unique sequential
precedence value assigned, and are applied to packets on the basis of this precedence value.
Lower the precedence of a rule, higher is its priority. This results in the rule with the lowest
precedence being applied first. No two rules can have the same precedence. The default
precedence is 1, so be careful to prioritize ACLs accordingly as they are added.
Supported in the following platforms:
• Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point
• Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000
• Service Platforms — Brocade Mobility RFS9510
Syntax:
deny <STARTING-MAC> [<ENDING-MAC>|precedence]
deny <STARTING-MAC> precedence <1-1000>
TABLE 9 Association-ACL-Policy-Config Commands
Command Description Reference
deny Specifies a range of MAC addresses denied access to the WLAN page 886
no Removes a deny or permit rule from this association ACL policy page 887
permit Specifies a range of MAC addresses allowed access to the WLAN page 889
clrscr Clears the display screen page 385
commit Commits (saves) changes made in the current session page 386
end Ends and exits the current mode and moves to the PRIV EXEC mode page 234
exit Ends the current mode and moves to the previous mode page 387
help Displays the interactive help system page 387
revert Reverts changes to their last saved configuration page 394
service Invokes service commands to troubleshoot or debug
(config-if) instance
configurations
page 394
show Displays running system information page 429
write Writes information to memory or terminal page 425