Brocade Mobility 5181 Access Point Product Reference Guide (Supporting software release 4.4.0.0) - Manual (Page 124)

110 Brocade Mobility 5181 Access Point Product Reference Guide
53-1002516-01
Enabling wireless LANs (WLANs)
5
Configuring WLAN security policies
As WLANs are being defined for an Mobility 5181 Access Point, a security policy can be created or
an existing policy edited (using the Create or Edit buttons within the Security Configuration screen)
to best serve the security requirements of the WLAN. Once new policies are defined, they are
available within the New WLAN or Edit WLAN screens and can be mapped to any WLAN. A single
security policy can be used by more than one WLAN if its logical to do so. For example, there may
be two or more WLANs within close proximity of each other requiring the same data protection
scheme.
To create a new security policy or modify an existing policy:
1. Select Network Configuration -> Wireless -> Security from the Mobility 5181 Access Point
menu tree.
The Security Configuration screen appears with existing policies and their attributes displayed.
NOTE
When the Mobility 5181 Access Point is first launched, a single security policy (default) is
available and mapped to WLAN 1. It is anticipated numerous additional security policies will be
created as the list of WLANs grows.
Configuring a WLAN security scheme with a discussion of all the authentication and encryption
options available is beyond the scope of this chapter. See
Chapter , Configuring Access Point
Security on page 6-131 for more details on configuring Mobility 5181 Access Point security.
For detailed information on the authentication and encryption options available to the Mobility
5181 Access Point and how to configure them, see to
“Configuring security options” on
page 132 and locate the section that describes your intended security scheme.
2. Click Logout to exit the Security Configuration screen.
Configuring a WLAN Access Control List (ACL)
An Access Control List (ACL) affords a system administrator the ability to grant or restrict Client
access by specifying a Client MAC address or range of MAC addresses to either include or exclude
from Mobility 5181 Access Point connectivity. Use the Mobile Unit Access Control List Configuration
screen to create new ACL policies (using the New Client ACL Policy sub-screen) or edit existing
policies (using the Edit Client ACL Policy sub-screen). Once new policies are defined, they are
available for use within the New WLAN or Edit WLAN screens to assign to specific WLANs based on
Client interoperability requirements.
Brocade recommends using the New Client ACL Policy or Edit Client ACL Policy screens strategically
to name and configure ACL policies meeting the requirements of the particular WLANs they may
map to. However, be careful not to name policies after specific WLANs, as individual ACL policies
can be used by more than one WLAN. For detailed information on assigning ACL policies to specific
WLANs, see
“Creating/editing individual WLANs” on page 107.
To create or edit ACL policies for WLANs:
1. Select Network Configuration -> Wireless -> Client ACL from the Mobility 5181 Access Point
menu tree.
The Mobile Unit Access Control List Configuration screen displays with existing ACL policies
and their current WLAN (if mapped to a WLAN).