Improve my ACL's configuration

[fouji]

Hello,

Excuse me for my english, but I'm French

I would like to improve my ACL configuration

My switches are HPE FlexNetwork  5510 (JH148A) and use Comware firmware.

My Network is :

Hyper-V servers' Network > Vlan 5 : 192.168.5.0

My servers' Network > Vlan 6 : 192.168.6.0

My users' Network > Vlan 7 : 192.168.7.0

My current ACL' s configuration is :

system-view
> acl number 3000
rule 10 permit IP destination 192.168.5.0 0.0.0.255
rule 11 permit IP destination 192.168.6.0 0.0.0.255
rule 20 deny IP


interface vlan-interface 5
packet-filter 3000 inbound

The active directory's server is currently in the vlan 7. The IP address of this server is 192.168.7.80

Please could you tell me how allow the Hyper-V's server to authenticate with this LDAP's server.

I tried :

system-view
> acl number 3000
rule 10 permit IP destination 192.168.5.0 0.0.0.255
rule 11 permit IP destination 192.168.6.0 0.0.0.255
rule 12 permit tcp source 192.168.7.80 0 source-port eq 389
rule 13 permit udp source 192.168.7.80 0 source-port eq 389 
rule 20 deny IP

interface vlan-interface 5
packet-filter 3000 inbound

I also tried :

system-view
> acl number 3000
rule 10 permit IP destination 192.168.5.0 0.0.0.255
rule 11 permit IP destination 192.168.6.0 0.0.0.255
rule 12 permit tcp source 192.168.7.80 0 source-port eq 389
rule 13 permit udp source 192.168.7.80 0 source-port eq 389
rule 14 permit tcp source 192.168.5.0 0.0.0.255 source-port eq 389
rule 15 permit udp source 192.168.5.0 0.0.0.255 source-port eq 389 
rule 20 deny IP

interface vlan-interface 5
packet-filter 3000 inbound

But that didn't work

Please, I would like the Hyper-V can autheticate on Active Directory's server without this server being able to access the vlan 5 ?

Thank you for your help

Regards,

[akg7]

Hello,

Have you got the solution or issue is till present?

Thanks!

[fouji]

hello,

No, I haven't got the solution.

Thanks

[akg7]

Hello,

What is the LDAP server config configured in switch?

Have you configured AAA in the switch?

https://techhub.hpe.com/eginfolib/networking/docs/switches/5130ei/5200-3946_security_cg/content/485048043.htm

Thanks!