Dynamically Applying Existing ACLs (HTTP and HTTPS)

When a port is authenticated, an IP ACL filter that exists in the running configuration on the RUCKUS device can be dynamically applied to the port. To do this, you must configure the Filter-Id (type 11) attribute on the RADIUS server. The Filter-Id attribute specifies the name or number of the RUCKUS IP ACL filter.

The following table shows the standard RADIUS attribute as defined in RFC 2865 for IP ACL.

Standard RADIUS Attribute for the IP ACL

Attribute Name

Attribute ID

Data Type

Description

Filter-Id

11

String

IPv4 ACL ID or name as configured on the RUCKUS device.

The following table shows the syntax for specifying the IP ACLs on the RADIUS server.

Syntax for Specifying the IP ACLs

Value

Description

ip.number .in

Applies the specified numbered IPv4 ACL to the port in the inbound direction.

ip.name .in

Applies the specified named IPv4 ACL to the port in the inbound direction.

Parent topic: Captive Portal Authentication (External Web Authentication)