Assigning Authorization Attributes 495You can set filters for incoming and outgoing packets: Use acl-name.in to filter traffic that enters the WX switch from usersvia a MAP access port or wired authentication port, or from thenetwork via a network port. Use acl-name.out to filter traffic sent from the WX switch to users viaa MAP access port or wired authentication port, or from the networkvia a network port.For example, the following command applies security ACL acl-101 topackets coming into the WX from user Jose:WX1200# set user Jose attr filter-id acl-101.insuccess: change accepted.The following command applies the incoming filters of acl-101 to theusers who belong to the group eastcoasters:WX1200# set usergroup eastcoasters attr filter-id acl-101.insuccess: change accepted.Assigning a Security ACL on a RADIUS ServerTo assign a security ACL name as the Filter-Id authorization attribute of auser or group record on a RADIUS server, see the documentation for yourRADIUS server.Clearing a SecurityACL from a User orGroupTo clear a security ACL from the profile of a user, MAC user, or group ofusers or MAC users in the local WX database, use the followingcommands:clear user username attr filter-idclear usergroup groupname attr filter-idclear mac-user username attr filter-idclear mac-usergroup groupname attr filter-idIf you have assigned both an incoming and an outgoing filter to a user orgroup, enter the appropriate command twice to delete both securityACLs. Verify the deletions by entering the display aaa command andchecking the output.To delete a security ACL from a user’s configuration on a RADIUS server,see the documentation for your RADIUS server.
