Cisco WLC CPU ACL

2015-12-15 Thread Dennis Xu
Has anyone implemented CPU ACL on Cisco WLCs and any lessons learned? I would like to apply CPU ACLs to protect WLC dynamic interfaces and hope it will not break anything. :) Thanks! --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS)

Re: Cisco WLC CPU ACL

2015-12-15 Thread Felix Windt
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Cisco WLC CPU ACL Has anyone implemented CPU ACL on Cisco WLCs and any lessons learned? I would like to apply CPU ACLs to protect WLC dynamic interfaces and hope it will not break anything. :) Thanks! --- Dennis Xu, MASc, CCIE #13056 Analys

Re: [WIRELESS-LAN] Cisco WLC CPU ACL

2015-12-15 Thread Matthew Newton
On Tue, Dec 15, 2015 at 08:54:15PM +, McClintic, Thomas wrote: > My understanding is that the CAPWAP traffic is not controlled by the CPU ACL. "show rules" at the CLI will show you the built-in ACLs which are automatically added to cover things like this. It covers everything normally used,

RE: Cisco WLC CPU ACL

2015-12-15 Thread McClintic, Thomas
@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Cisco WLC CPU ACL We are running CPU ACLs both on IPv4 and IPv6. The obvious thing is that you want to make sure to account for all your CAPWAP sources and all your management stations. If you use Prime Infrastructure to manage your WLCs