ACL on Interface and WLAN

[Anvar Mohammed]

if we configured acl on interface as well as wlan, which one will execute ?? or will it execute both ? if yes what is the order,,,  interface acl will execute first and then wlan acl or vice versa ???

anvar 

[Scott Fella]

You need to pick the best place and not use both because of ease of troubleshooting. If for example you have a WLAN that is mapped to multiple interfaces, then place it on the WLAN so you don't have to add the acl on each interface. If you have multiple eland mapping to the same interface, well placing the acl in the WLAN will allow you to have specific permits and deny for a given WLAN.  Usually interface acl's are for management access but all the rest would be placed on the WLAN. So having both can of course break things because both is used.  I would place acl's on the layer 3 interface if possible and not use the WLC acl's.  It's really up to you.

-Scott