Switches, Hubs, and Modems
cancel
Showing results for 
Search instead for 
Did you mean: 

HP Procurve 5412z Deny list not working

Mikey Webb
Occasional Visitor

HP Procurve 5412z Deny list not working

I have a wireless vlan that is 192.168.77.x I would like this be separate from all the other vlans that are all 192.168.x.x. I setup a few lists but I can't get the deny or the permit to work. I need to allow 192.168.45.15 but deny everything else.

This is what I have.

ip access-list extended "Guest"
10 permit udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 67
20 permit udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 53
25 permit ip 0.0.0.0 255.255.255.255 192.168.45.15 0.0.0.0
30 deny ip 0.0.0.0 255.255.255.255 192.168.0.0 0.0.255.255
40 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit
ip access-list connection-rate-filter "guest"

I can get to everything nothing is being denied. I am not sure where to go from here.
3 REPLIES
Michael_Breuer
Esteemed Contributor

Re: HP Procurve 5412z Deny list not working

Hi Mikey,

did you apply the ACL to any VLAN? Check the "sh access-list" output and verify. If not you need to map it to a VLAN with the "ip access-group" command.

See:
http://cdn.procurve.com/training/Manuals/3500-5400-6200-8200-ASG-Jan08-10-ACLs.pdf

Cheers,

Michael
Ingentive Networks GmbH
Patrick Terlisten
Honored Contributor

Re: HP Procurve 5412z Deny list not working

Hello,

you should add this ACL to a VLAN. Go to the VLAN context and try a

ip access-group guest in

Regards,
Patrick
Best regards,
Patrick
Mikey Webb
Occasional Visitor

Re: HP Procurve 5412z Deny list not working

I found the problem, the ACL was correct I was looking in the wrong place.

The previous person named the Vlan "Guests" not that it would matter that much, but he added guests to the Guests vlan. I changed everything to be Guest and it worked fine. Added Guest instead of guests would have fixed the problem.

I found that consistency and caps are important!

Thanks for your help.