User`s manual

249
DWS-1008 User’s Manual
D-Link Systems, Inc.
Conguring and Managing Security ACLs
DWS-1008# show security acl info all editbuffer
ACL edit-buffer information for all
set security acl ip acl-111 (ACEs 3, add 3, del 0, modied 2)
----------------------------------------------------
1. permit IP source IP 192.168.254.12 0.0.0.0 destination IP any
2. permit IP source IP 192.168.253.11 0.0.0.0 destination IP any
3. deny SRC source IP 192.168.253.1 0.0.0.255
set security acl ip acl-a (ACEs 1, add 1, del 0, modied 0)
----------------------------------------------------
1. permit SRC source IP 192.168.1.1 0.0.0.0
4. To clear the uncommitted acl-111 ACE from the edit buffer, type the following
command:
DWS-1008# rollback security acl acl-111
5. To ensure that you have cleared the acl-111 ACE, type the following command.
Only the uncommitted acl-a now appears.
DWS-1008# show security acl info all editbuffer
ACL edit-buffer information for all
set security acl ip acl-a (ACEs 1, add 1, del 0, modied 0)
----------------------------------------------------
1. permit SRC source IP 192.168.1.1 0.0.0.0
6. Alternatively, to clear the entire edit buffer of all changes made since a security ACL
was last committed and display the results, type the following commands:
DWS-1008# rollback security acl all
DWS-1008# show security acl info all editbuffer
ACL edit-buffer information for all
Using ACLs to Change CoS
For WMM or non-WMM trafc, you can change a packet’s priority by using an ACL to change
the packet’s CoS value. To change CoS value using an ACL, you must map the ACL to the
outbound trafc direction on an AP port, Distributed AP, or user VLAN.
For example, to remap IP packets from IP address 10.10.20.5 that have IP precedence value
3, to have CoS value 7 when they are forwarded to any 10.10.30.x address on Distributed AP
2, enter the following commands:
DWS-1008# set security acl ip acl1 permit cos 7 ip 10.10.20.5 0.0.0.0 10.10.30.0
0.0.0.255 precedence 3
success: change accepted.
DWS-1008# set security acl ip acl1 permit 0.0.0.0 255.255.255.255
success: change accepted.
DWS-1008# commit security acl acl1
success: change accepted.