• SonicOS 7
• Wireless Overview
  • Device Support
  • Compliance
  • Considerations for Using Wireless Connections
  • Adjusting the Antennas
  • Wireless Node Count Enforcement
  • About MAC Address Filtering
• Status
  • WLAN Settings
  • WLAN Statistics
  • WLAN Activities
  • Station Status
• Settings
  • Access Point
    • Access Point Wireless Settings
      • 802.11n Wireless Settings
      • 802.11a/b/g Wireless Settings
      • 802.11ac Wireless Settings
    • Wireless Virtual Access Point
  • Wireless WDS Station
  • Access Point & WDS Station
• Security
  • About Authentication
  • Configuring the WEP Settings
  • Configuring WPA3/WPA2/WPA PSK Settings
  • Configuring WPA3/WPA2/WPA EAP Settings
• Advanced
  • Beaconing and SSID Controls
  • Green Access Point
  • Advanced Radio Settings
    • Configurable Antenna Diversity
• MAC Filter List
  • Deployment Considerations
  • Configuring MAC Filter List
• IDS - Wireless Intrusion Detection Service
  • Configuring IDS Settings
  • Discovered Access Points
• Virtual Access Point
  • Wireless Virtual AP Configuration Task List
  • Virtual Access Point Profiles
    • Virtual Access Point Schedule Settings
    • Virtual Access Point Profile Settings
      • WEP Encryption Settings
      • WPA-PSK / WPA2-PSK Encryption Settings
      • RADIUS Server Settings
    • ACL Enforcement
  • Virtual Access Point Objects
  • Virtual Access Point Groups
  • Enabling the Virtual Access Point Group
• SonicWall Support
  • About This Document

ACL Enforcement

Each Virtual Access Point can support an individual Access Control List (ACL) to provide more effective authentication control. The Wireless ACL feature works in tandem with the wireless MAC Filter List currently available on SonicOS. Using the ACL Enforcement settings, users are able to enable or disable the MAC Filter List, configure the Allow List, and configure the Deny list.

Each VAP can have its own MAC Filter List settings or use the global settings. In Virtual Access Point (VAP) mode, each VAP of this group shares the same MAC Filter List settings.

To enable MAC Filter List enforcement:

1. Toggle Enable MAC Filter List option to enable it. When the MAC filter list is enabled, the other settings are also enabled so you can set them.
2. Toggle Use Global ACL Settings option to enable it. This associates the Virtual Access Point with the already existing MAC Filter List settings for the SonicWall network security appliance. Note you cannot edit the Allow or Deny Lists with this option enabled.

3. In the Allow List, select an address object group from the drop-down menu. This identifies the MAC addresses of the devices allowed to access the virtual access point.

   Choose Create MAC Address Object Group if you want to create a new address object group containing MAC addresses of the devices that are allowed access. Refer to the SonicOS 7 Match Objects administration guide for information on how to create an address object group.

4. In the Deny List, select an address object group from the drop-down menu. This identifies the MAC addresses of the devices denied access to the virtual access point.

   Choose Create MAC Address Object Group if you want to create a new address object group containing MAC addresses of the devices that are denied access. Refer to the SonicOS 7 Match Objects administration guide for information on how to create an address object group.

5. Click Accept when done.