I am totally new to wireless security and would appreciate some assistance. We have 4402 WLC's and from what I've read it would seem that a CPU ACL is what I would need to create and apply to accomplish our goals. Unfortunately I am not sure what interface to apply it on and what type it should be.
Our scenario is we have wireless clients that we would like to limit traffic to certain services by applying ACL's. The ACL needs to limit traffic originating on our wireless network (10.10.130.x) to the following networks on the following ports:
My interfaces on the WLC are set up as the following:
ap-manager vlan 10 10.10.130.251 static enabled
management vlan 10 10.10.130.250 static not supported
service-port N/A 192.168.130.50 static not supported
Thanks for the response and doc. In our config we do not have a dynamic interface created and I was trying to accomplish this w/o one. I was able to apply the acl to the wlan and override the interface acl, and so far this seems to work.