Skip to ContentSkip to Footer
Start of content
- Community Home
- >
- Networking
- >
- Switching and Routing
- >
- Comware Based
- >
- H3C S5800 Switch (HP A5800) ACL Configuration
Comware Based
turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
-
-
Categories
- Topics
- Hybrid IT with Cloud
- Mobile & IoT
- IT for Data & Analytics
- Transformation
- Strategy and Technology
- Products
- Cloud
- Integrated Systems
- Networking
- Servers and Operating Systems
- Services
- Storage
- Company
- Events
- Partner Solutions and Certifications
- Welcome
- Welcome
- Announcements
- Tips and Tricks
- Feedback
-
Blogs
- Alliances
- Around the Storage Block
- Behind the scenes @ Labs
- Converged Data Center Infrastructure
- Digital Transformation
- Grounded in the Cloud
- HPE Careers
- HPE Storage Tech Insiders
- Infrastructure Insights
- Inspiring Progress
- Internet of Things (IoT)
- My Learning Certification
- Networking
- OEM Solutions
- Servers: The Right Compute
- Telecom IQ
- Transforming IT
-
Quick Links
- Community
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Contact
- Email us
- Tell us what you think
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Enterprise.nxt
- Marketplace
- Aruba Airheads Community
-
Categories
-
Forums
-
Blogs
-
InformationEnglish
H3C S5800 Switch (HP A5800) ACL Configuration
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
03-07-2011 01:41 PM
03-07-2011 01:41 PM
H3C S5800 Switch (HP A5800) ACL Configuration
H3C S5800 Switch (HP A5800) ACL Configuration
I am having quite a hard time understanding and implementing an ACL for our Public Wireless. I have a vlan that all public users are put into and get an ip address to correspond with that vlan. I then have attempted to apply the ACL to both the vlan and the individual ports but to no avail. display packet-filter all shows that the ACLS are running on the ports, but nothing seems to take affect.
acl number 3198 name PublicOutbound
rule 100 permit udp destination 10.1.1.1 0 destination-port eq bootpc
rule 105 permit udp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0 destination-port eq dns
rule 106 permit tcp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0 destination-port eq domain
rule 109 permit icmp source 172.20.198.0 0.0.0.255 destination 172.20.198.1 0
rule 110 permit icmp source 172.20.198.0 0.0.0.255 destination 172.20.198.254 0
rule 111 permit icmp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0
rule 200 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq www
rule 205 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq 443
rule 210 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq 510
rule 999 deny ip source 172.20.198.0 0.0.0.255
acl number 3199 name PublicInbound
rule 100 permit udp destination-port eq bootps
rule 105 permit udp source 10.1.1.1 0 destination 172.20.198.0 0.0.0.255 destination-port eq dns
rule 106 permit tcp source 10.1.1.1 0 destination 172.20.198.0 0.0.0.255 destination-port eq domain
rule 110 permit icmp destination 172.20.198.0 0.0.0.255
rule 200 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq www
rule 205 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq 443
rule 210 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq 510
rule 999 deny ip destination 172.20.198.0 0.0.0.255
Thanks for any help that anyone can provide.
acl number 3198 name PublicOutbound
rule 100 permit udp destination 10.1.1.1 0 destination-port eq bootpc
rule 105 permit udp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0 destination-port eq dns
rule 106 permit tcp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0 destination-port eq domain
rule 109 permit icmp source 172.20.198.0 0.0.0.255 destination 172.20.198.1 0
rule 110 permit icmp source 172.20.198.0 0.0.0.255 destination 172.20.198.254 0
rule 111 permit icmp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0
rule 200 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq www
rule 205 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq 443
rule 210 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq 510
rule 999 deny ip source 172.20.198.0 0.0.0.255
acl number 3199 name PublicInbound
rule 100 permit udp destination-port eq bootps
rule 105 permit udp source 10.1.1.1 0 destination 172.20.198.0 0.0.0.255 destination-port eq dns
rule 106 permit tcp source 10.1.1.1 0 destination 172.20.198.0 0.0.0.255 destination-port eq domain
rule 110 permit icmp destination 172.20.198.0 0.0.0.255
rule 200 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq www
rule 205 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq 443
rule 210 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq 510
rule 999 deny ip destination 172.20.198.0 0.0.0.255
Thanks for any help that anyone can provide.
1 REPLY
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-30-2011 04:45 AM
07-30-2011 04:45 AM
Re: H3C S5800 Switch (HP A5800) ACL Configuration
Re: H3C S5800 Switch (HP A5800) ACL Configuration
Hi There,
I'm having the similar problem, did you manage to sort this out?
I'd be interested to hear what you have done.
Thanks!
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.
End of content
United States
Hewlett Packard Enterprise International
Communities
- Communities
- HPE Blogs and Forum
© Copyright 2018 Hewlett Packard Enterprise Development LP