Protection Profiles Entry

When you enable Advanced Wireless Features, WIDS Profiles is renamed to Protection Profiles and contains additional tabs that enable you to manage L3 Firewall Profiles.

WIDS Profiles

After you click Protection Profiles, the WIDS Profiles tab loads by default. From there you can create or edit WIDS profiles to configure the type of security threats you want to monitor.

L3 Firewall Profile

In the L3 Firewall Profiles tab, you can create or edit L3 Firewall Profiles to configure the WiFi bridge access control list.

Click Create new to create a L3 Firewall profile.

From there, you can create IPv4 or IPv6 rule lists to allow or deny traffic that matches the configured policy.

These fields correspond to the following CLI settings:

config wireless-controller access-control-list

  edit <name>

    set comment {string}

    config layer3-ipv4-rules

      edit <rule-id>

        set comment {string}

        set srcaddr {user}

        set srcport {integer}

        set dstaddr {user}

        set dstport {integer}

        set protocol {integer}

        set action [allow|deny]

    config layer3-ipv6-rules

      edit <rule-id>

        set comment {string}

        set srcaddr {user}

        set srcport {integer}

        set dstaddr {user}

        set dstport {integer}

        set protocol {integer}

        set action [allow|deny]