The packet filtering policy is applied under the wireless service template, and the relevant configuration on the AC:
wlan service-template 1 ssid lab vlan 1007 packet-filter 3000 outbound packet-filter 3000 inbound service-template enable acl number 3000 rule 10 permit ip source 172.22.0.0 0.0.255.255 destination 172.20.40.128 0.0.0.127 rule 1000 deny ip
|
After the configuration is complete, use the terminal to connect to the wireless, and test that the ip address not in the rule 10 can still be pinged.
Solution: Packet filtering based on wireless service templates requires ACL rules to be configured on the AP, regardless of whether it uses centralized forwarding or local forwarding, which can be configured by map file distribution.