Wireless Access

I was testing some inbound rules on main AP controller. I set in inbound rule of 192.168.1.0 subnet and now I cannot get into the managment login screen for ap controller. is there a way I can get into this ap to undo the change ? 

If you have physical access to your access points (when running Aruba Instant controllerless) or your controller (when running with a mobility controller), you can use the serial console port to get to the configuration and remove the access list via CLI commands.

is there any other method ? the APs are 100 feet mounted on the ceiling 

Are you running Aruba Instant (controllerless)? Or APs connected to a controller?

What is the type of the APs? If they have a built in Bluetooth radio, you can see if the bluetooth console is enabled and you can get access through that way to the console. This procedure requires that you enabled the console.

The access list that you configured is explicitly designed to prevent access over the network to the management of your APs.

If you are running Instant and have an additional AP, you might add that to the cluster. If that worked, you can reboot all other APs to make sure the one you have on your table is virtual controller, then use the serial console on that AP to get in and revert the management ACL. You just need access to an AP that is running the virtual controller, so practically just one of them if you can remotely power-cycle the other APs by pulling the cable or disable PoE.