To Next Page

To Previous Page

10-54

IPv4 Access Control Lists (ACLs)

Configuring Standard ACLs

Example of Creating and Listing a Standard, Named ACL. This exam-

ple illustrates how to create a standard, named ACL with several ACEs. This

example creates an ACL that:

1. permits IPv4 traffic from a host with the address of 10.10.10.104

2. creates another ACE that blocks all other IPv4 traffic from the same

subnet

3. allows all other IPv4 traffic

Figure 10-14. Example of Commands Used To Create an Standard, Named ACL

[ log]

This option generates an ACL log message if:

• The action is deny.

• There is a match.

• ACL logging is enabled on the switch. (Refer to “Enable ACL

“Deny” Logging” on page 10-112.)

(Use the debug command to direct ACL logging output to the

current console session and/or to a Syslog server. Note that you

must also use the logging < ip-addr > command to specify the

addresses of Syslog servers to which you want log messages

sent. See also “Enable ACL “Deny” Logging” on page 10-112.)

HP Switch(config)# ip access-list standard Sample-List

HP Switch(config-std-nacl)# permit host 10.10.10.104

HP Switch(config-std-nacl)# deny 10.10.10.1/24 log

HP Switch(config-std-nacl)# permit any

HP Switch(config-std-nacl)# exit

HP Switch(config)# _

Creates the “Sample-List”

ACL and enters the “Named

ACL” context for this list.

Appends three ACEs to the

list in the order shown.

Exits from the nacl context.

Questions and Answers:

Need help?

Do you have a question about the HP E3800 Series and is the answer not in the manual?

HP E3800 Series Specifications

General