Filter
Top Products
205 | 802.1XAuthentication DellPowerConnectW-SeriesArubaOS6.2 | User Guide
In the WebUI
1. Navigate to the Configuration > Security > Access Control > Policies page. Select Add to add the student
policy.
2. For Policy Name, enter student.
3. For Policy Type, select IPv4 Session.
4. Under Rules, select Add to add rules for the policy.
a. Under Source, select user.
b. Under Destination, select alias.
NOTE: The following step defines an alias representing all internal network addresses. Once defined, you
can use the alias for other rules and policies.
c. Under the alias selection, click New. For Destination Name, enter “Internal Network”. Click Add to add a
rule. For Rule Type, select network. For IP Address, enter 10.0.0.0. For Network Mask/Range, enter 255.0.0.0.
Click Add to add the network range. Repeat these steps to add the network range 172.16.0.0 255.255.0.0.
Click Done. The alias “Internal Network” appears in the Destination menu. This step defines an alias
representing all internal network addresses. Once defined, you can use the alias for other rules and policies.
d. Under Destination, select Internal Network.
e. Under Service, select service. In the Service scrolling list, select svc-telnet.
f. Under Action, select drop.
g. Click Add.
5. Under Rules, click Add.
a. Under Source, select user.
b. Under Destination, select alias. Then select Internal Network.
c. Under Service, select service. In the Service scrolling list, select svc-pop3.
d. Under Action, select drop.
e. Click Add.
6. Repeat steps 4A-E to create rules for the following services: svc-ftp, svc-smtp, svc-snmp, and svc-ssh.
7. Click Apply.
8. Click the User Roles tab. Click Add to create the student role.
9. For Role Name, enter student.
10. Under Firewall Policies, click Add. In Choose from Configured Policies, select the student policy you previously
created. Click Done.
11. Click Apply.
In the CLI
(host)(config) #ip access-list session student
user alias “Internal Network” svc-telnet deny
user alias “Internal Network” svc-pop3 deny
user alias “Internal Network” svc-ftp deny
user alias “Internal Network” svc-smtp deny
user alias “Internal Network” svc-snmp deny
user alias “Internal Network” svc-ssh deny
(host)(config) #user-role student
session-acl student
session-acl allowall