HP 5900 - ACL Configuration Example; Network Requirements

10
Task Command
Display ACL configuration and match statistics.
display acl [ ipv6 ] { acl-number | all | name
acl-name }
Display whether an ACL has been successfully applied
to an interface for packet filtering).
display packet-filter { interface [ interface-type
interface-number ] [ inbound | outbound ] | { interface
vlan-interface vlan-interface-number [ vlan-id ] }
[ inbound | outbound ] [ slot slot-number ] }
Display match statistics for packet filtering ACLs.
display packet-filter statistics interface interface-type
interface-number { inbound | outbound } [ [ ipv6 ]
{ acl-number | name acl-name } ] [ brief ]
Display the accumulated statistics for packet filtering
ACLs.
display packet-filter statistics sum { inbound |
outbound } [ ipv6 ] { acl-number | name acl-name }
[ brief ]
Display detailed ACL packet filtering information.
display packet-filter verbose interface interface-type
interface-number { inbound | outbound } [ [ ipv6 ]
{ acl-number | name acl-name } ] [ slot slot-number ]
Display QoS and ACL resource usage. display qos-acl resource [ slot slot-number ]
Clear ACL statistics.
reset acl [ ipv6 ] counter { acl-number | all | name
acl-name }
Clear match statistics (including the accumulated
statistics) for packet filtering ACLs.
reset packet-filter statistics { global | interface
[ interface-type interface-number ] | vlan [ vlan-id ] }
{ inbound | outbound } [ default | [ ipv6 ] { acl-number
| name acl-name } ]
ACL configuration example
Network requirements
A company interconnects its departments through Device A. Configure an ACL to:
• Permit access from the President's office at any time to the financial database server.
• Permit access from the Financial department to the database server only during working hours (from
8:00 to 18:00) on working days.
• Deny access from any other department to the database server.