topic WLAN acl help in Wireless https://community.cisco.com/t5/wireless/wlan-acl-help/m-p/1658295#M218864 <HTML><HEAD></HEAD><BODY><P>You only authorize when the source port is DNS. It's wrong.</P><P></P><P>Client sending request :</P><P>source port = dynamic</P><P>destination port = dns ports on DNS server</P><P></P><P>server replying to client :</P><P>source port=DNS port on DNS server</P><P>destination = same dynamic unpredictable port as mentioned above</P><P></P><P></P><P>so you should authorize "from any to DNS server ip and dns port" and "from DNS server ip and port to any"</P></BODY></HTML> Mon, 11 Jul 2011 18:31:17 GMT Nicolas Darchis 2011-07-11T18:31:17Z WLAN acl help https://community.cisco.com/t5/wireless/wlan-acl-help/m-p/1658294#M218863 <P>ok what i am trying to do is set up an acl that will allow my wirless guest to get to the internet but have no access to my internal network.&nbsp; I gave them access to my dhcp server and dns server . Pulls a DHCP but say it can not connect to the DNS server,&nbsp; What am i missing ?</P> Sun, 04 Jul 2021 03:25:28 GMT https://community.cisco.com/t5/wireless/wlan-acl-help/m-p/1658294#M218863 Kurt Warner 2021-07-04T03:25:28Z WLAN acl help https://community.cisco.com/t5/wireless/wlan-acl-help/m-p/1658295#M218864 <HTML><HEAD></HEAD><BODY><P>You only authorize when the source port is DNS. It's wrong.</P><P></P><P>Client sending request :</P><P>source port = dynamic</P><P>destination port = dns ports on DNS server</P><P></P><P>server replying to client :</P><P>source port=DNS port on DNS server</P><P>destination = same dynamic unpredictable port as mentioned above</P><P></P><P></P><P>so you should authorize "from any to DNS server ip and dns port" and "from DNS server ip and port to any"</P></BODY></HTML> Mon, 11 Jul 2011 18:31:17 GMT https://community.cisco.com/t5/wireless/wlan-acl-help/m-p/1658295#M218864 Nicolas Darchis 2011-07-11T18:31:17Z