VAP Access Control List

Each Virtual Access Point can support an individual Access Control List (ACL) to provide more effective authentication control. The Wireless ACL Enhancement feature works in tandem with the wireless MAC Filter List currently available on SonicOS. Unified ACL is supported on the internal wireless for the Dell SonicWALL TZ and NSA series appliances, SonicPoint-N appliances, SonicPointN-DR appliances, and the SonicPoint Ni/Ne appliances. Using the Wireless ACL enhancement, users are able to Enable or Disable the MAC Filter List, set the Allow List, and set the Deny list.

The Wireless ACL Enhancement allows each VAP to have its own MAC Filter List settings or use the global settings. When the global settings are enabled, the SonicPoint-N/ SonicPointN-DR/ SonicPoint Ni/Ne the SonicPoint, or SonicPoint-N appliance uses these settings by default. In Virtual Access Point (VAP) mode, each VAP of this group shares the same MAC Filter List settings.

Configuring the SonicPointN VAP MAC Filter List

* 
NOTE: When using the VAP ACL feature with a SonicPointN device, the MAC Filter List settings are first stored on the Dell SonicWALL Network Security appliance, then pushed to the SonicPointN device.
To configure the SonicPointN VAP MAC Filter List:
1
Navigate to the SonicPoint > Virtual Access Points page.
2
Click the Add... button under the Virtual Access Points section.
3
In the dialog that displays, click the Advanced tab.

4
Click the checkbox to Enable MAC Filter List. In order to configure the Global ACL Settings, Allow List, or Deny List, you must enable the MAC Filter List.
5
Click the User Global ACL Settings checkbox to associate this Virtual Access Point with the already existing MAC Filter List settings for the Dell SonicWALL Network Security appliance. Note you will not be able to edit the Allow or Deny Lists with this option enabled.
6
Select an Address Object Group for the Allow List and Deny List.

7
You can also create a new custom MAC Address Object Group by selecting the option from the drop-down menu. The following dialog displays:

8
Type the Name of the new address object group you want to create in the specified field.
9
Then, click the value(s) you want associated, followed by the Arrow button.
10
After selecting the value(s) you want associated to the MAC Address Object Group, click OK.