- Community Home
- >
- Networking
- >
- Switching and Routing
- >
- Aruba & ProVision-based
- >
- Stateful fw beetwen vlans on 5406R switch
-
- Forums
-
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
- HPE Blog, Austria, Germany & Switzerland
- Blog HPE, France
- HPE Blog, Italy
- HPE Blog, Japan
- HPE Blog, Middle East
- HPE Blog, Russia
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
-
Blogs
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Blog, Latin America
- HPE Blog, Middle East
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
-
Information
- Community
- Welcome
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Tips and Tricks
- Resources
- Announcements
- Email us
- Feedback
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Aruba Airheads Community
- Enterprise.nxt
- HPE Dev Community
- Cloud28+ Community
- Marketplace
-
Forums
-
Blogs
-
Information
-
English
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-21-2019 01:13 PM
06-21-2019 01:13 PM
Stateful fw beetwen vlans on 5406R switch
I have problem with SWITCH HPE 5406Rzl
configuration for Router is ok
Hi, can anyone explain me why I can not connect to 10.100.10.3 from 10.200.200.200 when ACL10_in is applied on switch?
I think I can not connect because it is stateless fw on switch?
I see option ip access-group ACL10_in (in, out vlan-in), I made few combination with in, out vlan-in but without any results
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-23-2019 12:04 PM
06-23-2019 12:04 PM
Re: Stateful fw beetwen vlans on 5406R switch
Hello,
Please check the ACL10_in rules. You are permitting the host on VLAN 10 to communicate only with the host on VLAN 20, but not with the host 10.200.200.200. Adding a rule to ACL10_in to permit traffic to host 10.200.200.200 should resolve the issue.
Justin
Working @ HPE

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-02-2019 01:23 PM
07-02-2019 01:23 PM
Re: Stateful fw beetwen vlans on 5406R switch
Thank you jguse for your reply.
I know when I put :
ACL10_in
permit ip host 10..100.10.3 host 10.100.20.5
permit ip host 10.100.10.3 host 10.200.200.200 #this traffic is initiated from 10.200.200.200 and this ACE is for return traffic
but I don't want to doubled my acl.
for ex.
ACL10_in
permit ip host 10..100.10.3 host 10.100.20.5
permit ip host 10.100.10.3 host 10.200.200.200
ACL20_in
permit ip 10.100.20.0 0.0.0.255 10.200.200.0 0.0.0.255
ACLs above permit traffic initieted from 10..100.10.3 to 10.100.20.5 but not return traffic from 10.100.20.5 to 10.100.10.3
there is needed second entry in ACL20_in permt ip host 10.100.20.5 host 10.100.10.3 for return traffic.,
But I don't want to create two entries one for outcoming and second for incoming traffic for every particulary traffic.
Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2021 Hewlett Packard Enterprise Development LP