Defining Policy Rules for Wireless APs

You can also apply policy rules on the wireless AP. Applying policy rules at the AP helps restrict unwanted traffic at the edge of your network. All APs support 64 rules. Filtering at the AP can be configured with the following Topology types:

• Bridge Traffic Locally at the AP — If filtering at the AP is enabled on a Bridge Traffic Locally at the AP topology, the filtering is applied to traffic in both the inbound and outbound direction, the inbound direction is from the wireless device to the network, and the outbound direction is from the network to the wireless device.
• Routed and Bridge Traffic Locally at the EWC — If filtering at the AP is enabled on a Routed or Bridge Traffic Locally at the EWC topology, the filtering is applied only to traffic in the inbound direction. The filters applied in the outbound direction at the AP can be the same as or different from filters applied at the controller.

A role can use more than one topology and more than one type of topology. If a role uses at least one Bridged at AP topology, the AP filters all inbound traffic assigned to the rule. The controller performs all outbound filtering.