ProCurve 2610 - Page 281

Access Control Lists (ACLs)
Configuring and Assigning an ACL
ProCurve(config)# access-list 110 permit tcp host 10.10.10.44 host 10.10.20.78
eq telnet
ProCurve(config)# access-list 110 deny ip 10.10.10.1/24 10.10.20.1/24
ProCurve(config)# access-list 110 permit ip any any
A (Refer to figure 9-15, above.)
ProCurve(config)# interface 1 access-group 110 in
ProCurve(config)# access-list 120 permit tcp host 10.10.20.100 host 10.10.30.55
eq ftp
ProCurve(config)# access-list 120 deny tcp any any eq ftp
ProCurve(config)# access-list 120 permit ip any any
ProCurve config)# interface 2 access-group 120 in
B (Refer to figure 9-15, above.)
ProCurve(config)# write mem
ProCurve(config)# show config
Startup configuration:
write memory writes the configuration
changes to the startup-config file.
; J9085A Configuration Editor; Created on release #R.11.XX
hostname "ProCurve Switch 2610-24"
snmp-server contact "Allen Smith"
snmp-server location "Building P"
ip access-list standard "50"
permit 10.128.100.10 0.0.0.0
permit 10.128.100.27 0.0.0.0
permit 10.128.80.14 0.0.0.0
exit
ip access-list standard "60"
deny 10.128.93.17 0.0.0.0
deny 10.28.93.25 0.0.0.0
permit 0.0.0.0 255.255.255.255
exit
ip access-list extended "110"
permit tcp 10.10.10.44 0.0.0.0 10.10.20.78 0.0.0.0 eq 23
deny ip 10.10.10.1 0.0.0.255 10.10.20.1 0.0.0.255
permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit
ip access-list extended "120"
permit tcp 10.10.20.100 0.0.0.0 10.10.30.55 0.0.0.0 eq 21
deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 21
permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit
interface 1
access-group "110" in
exit
Access-List configuration in the
interface 2
switch’s startup-config file.
access-group "120" in
exit
.
.
.
Figure 9-16. Example of Configuration Commands for an Extended ACL
9-49