Working with ACL and Firewall Policies

Remote APsRemote APs extend corporate network to the users working from home or at temporary work sites. Remote APs are deplyed at branch office sites and are connected to the central network on a WAN link.support the followingACLAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.; unless otherwise noted, you apply theseACLSAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.to user roles:

StandardACLsAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.—Permit or deny traffic based on the source IP address of the packet.

EthertypeACLsAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.—Filter traffic based on the Ethertype field in the frame header.

MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network.ACLsAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.—Filter traffic on a specific sourceMACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network.address or range ofMACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network.addresses.

FirewallFirewall is a network security system used for preventing unauthorized access to or from a private network.policies (sessionACLsAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.)—Identifies specific characteristics about a data packet passing through theArubaManaged Deviceand takes some action based on that identification. You apply theseACLsAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.to user roles or uplink ports.

To configurefirewallFirewall is a network security system used for preventing unauthorized access to or from a private network.policies, you must install thePEFNG政策Enforcement Firewall. PEF also known as PEFNG provides context-based controls to enforce application-layer security and prioritization. The customers using Aruba mobility controllers can avail PEF features and services by obtaining a PEF license. PEF for VPN users—Customers with PEF for VPN license can apply firewall policies to the user traffic routed to a controller through a VPN tunnel.license.

For more information aboutACLsAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.andfirewallFirewall is a network security system used for preventing unauthorized access to or from a private network.policies, seeAdvanced Configuration Options.