H3C S5800 Switch (HP A5800) ACL Configuration

[elkhornps]

I am having quite a hard time understanding and implementing an ACL for our Public Wireless. I have a vlan that all public users are put into and get an ip address to correspond with that vlan. I then have attempted to apply the ACL to both the vlan and the individual ports but to no avail. display packet-filter all shows that the ACLS are running on the ports, but nothing seems to take affect.

acl number 3198 name PublicOutbound
rule 100 permit udp destination 10.1.1.1 0 destination-port eq bootpc
rule 105 permit udp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0 destination-port eq dns
rule 106 permit tcp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0 destination-port eq domain
rule 109 permit icmp source 172.20.198.0 0.0.0.255 destination 172.20.198.1 0
rule 110 permit icmp source 172.20.198.0 0.0.0.255 destination 172.20.198.254 0
rule 111 permit icmp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0
rule 200 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq www
rule 205 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq 443
rule 210 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq 510
rule 999 deny ip source 172.20.198.0 0.0.0.255

acl number 3199 name PublicInbound
rule 100 permit udp destination-port eq bootps
rule 105 permit udp source 10.1.1.1 0 destination 172.20.198.0 0.0.0.255 destination-port eq dns
rule 106 permit tcp source 10.1.1.1 0 destination 172.20.198.0 0.0.0.255 destination-port eq domain
rule 110 permit icmp destination 172.20.198.0 0.0.0.255
rule 200 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq www
rule 205 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq 443
rule 210 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq 510
rule 999 deny ip destination 172.20.198.0 0.0.0.255


Thanks for any help that anyone can provide.

[rafter_1]

Hi There,

I'm having the similar problem, did you manage to sort this out?

I'd be interested to hear what you have done.

Thanks!