HP ProCurve 6120G/XG

IPv4 Access Control Lists (ACLs)
Contents
Guidelines for Planning the Structure of an ACL . . . . . . . . . . . . . . . . 9-24
What Is the Difference Between Network (or Subnet)
Rules for Defining a Match Between a Packet and an
A Configured ACL Has No Effect Until You
Display All ACLs and Their Assignments in
ACL Configuration and Operating Rules . . . . . . . . . . . . . . . . . . . . . . . 9-25
How an ACE Uses a Mask To Screen Packets for Matches . . . . . . . . 9-26
Masks and the Masks Used with ACLs? . . . . . . . . . . . . . . . . . . . . 9-27
Access Control Entry (ACE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-28
Configuring and Assigning an ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-33
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-33
General Steps for Implementing ACLs . . . . . . . . . . . . . . . . . . . . . 9-33
Types of ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-33
ACL Configuration Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-34
Standard ACL Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-35
Extended ACL Configuration Structure . . . . . . . . . . . . . . . . . . . . 9-35
ACL Configuration Factors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-37
ACL Resource Consumption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-37
The Sequence of Entries in an ACL Is Significant . . . . . . . . . . . . 9-37
In Any ACL, There Will Always Be a Match . . . . . . . . . . . . . . . . . 9-38
Apply It to an Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-38
Using the CLI To Create an ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-39
General ACE Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-39
Using CIDR Notation To Enter the ACL Mask . . . . . . . . . . . . . . . 9-39
Configuring and Assigning a Numbered, Standard ACL . . . . . . . . . . 9-40
Configuring and Assigning a Numbered, Extended ACL . . . . . . . . . . 9-45
Configuring a Named ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-51
Enabling or Disabling ACL Filtering on an Interface . . . . . . . . . . . . . 9-53
Deleting an ACL from the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-54
Displaying ACL Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-55
Display an ACL Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-55
Display the Content of All ACLs on the Switch . . . . . . . . . . . . . . . . . . 9-56
Display the ACL Assignments for an Interface . . . . . . . . . . . . . . . . . . 9-57
Displaying the Content of a Specific ACL . . . . . . . . . . . . . . . . . . . . . . 9-58
Displaying the Current ACL Resources . . . . . . . . . . . . . . . . . . . . . . . . 9-60
the Switch Startup-Config File and Running-Config File . . . . . . . . . . 9-61
9-2