No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


S5720HI V200R010C00 Configuration Guide - WLAN-AC

This document describes native AC (hereinafter referred to as WLAN AC) configuration procedures and provides configuration examples.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring ACL-based Packet Filtering

Configuring ACL-based Packet Filtering


When ACL-based packet filtering is configured in a traffic profile, the device permits or denies packets based on ACL rules, therefore controlling network traffic.

Pre-configuration Tasks

Before configuring ACL-based packet filtering, complete the following tasks:

  • Perform the task of WLAN Service Configuration.

  • Create corresponding ACL rules.

    The traffic-filter command can reference a numbered ACL that is not configured. You can configure the referenced ACL after running this command.


  1. Run:


    The system view is displayed.

  2. Run:


    The WLAN view is displayed.

  3. Run:

    traffic-profile name profile-name

    The traffic profile view is displayed.

    By default, the system provides the traffic profile default.

  4. Run:

    traffic-filter { inbound | outbound } ipv4 acl { acl-number | name acl-name }

    The ACL-based packet filtering in the traffic profile is configured.

    By default, ACL-based packet filtering is not configured in a traffic profile.

    You can only configure a maximum of eight ACL rules in the same direction. The sequence in which ACL rules takes effect follows the sequence in which the rules are configured. To change the current packet filtering rules, delete all the related configurations and reconfigure the ACL-based packet filtering.

    When multiple traffic-filter commands are configured for ACL-based packet filtering in the same direction in the same traffic profile, packets are matched against the next rule in the sequence in which the commands are configured. If packets match a rule, the device executes the specified policy and stops the matching process. Otherwise, the device continues to match packets against the next rule. If no rule is matched, the packets are allowed to pass through.

    The ACL configured or changed on the AC takes effect only after being delivered to APs using the commit command.

  5. Run:


    Return to the WLAN view.

  6. Run:

    vap-profile name profile-name

    The VAP profile view is displayed.

  7. Run:

    traffic-profile profile-name

    The traffic profile is bound to the VAP profile.

    By default, the traffic profile default is bound to a VAP profile.

  8. Run:


    Return to the WLAN view.

  9. Run:

    commit { all | ap-name ap-name | ap-id { ap-id1 [ to ap-id2 ] } &<1-10> }

    Configurations are delivered to APs.

Updated: 2019-12-28

Document ID: EDOC1000141952

Views: 203426

Downloads: 522

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Previous Next