Cisco Extended ACL on Aruba ACL

[keshavboodhun]

Hi,

Actually I had some ACL to put on Aruba. Below is my Cisco ACL.

ip access-list extended ACCESS
permit ip host 172.16.4.224 10.0.0.0 0.0.0.255
deny ip host 172.16.4.158 192.168.90.100 0.0.0.2
deny ip 172.16.4.0 0.0.1.255 host 10.0.0.7
permit ip 172.16.4.0 0.0.1.255 any

[jmpk]

Hi 

ACL configuration on Aruba switches is almost simliar to Cisco syntax ,  So you can use the same ACL config from cisco in Aruba.  Also i would request you to check the CLI reference guide for Comware, Aruba & Cisco for more command comparison 

HP-2530-48G(config)# ip access-list extended ACCESS
HP-2530-48G(config-ext-nacl)# permit ip host 172.16.4.224 10.0.0.0 0.0.0.255
HP-2530-48G(config-ext-nacl)# deny ip host 172.16.4.158 192.168.90.100 0.0.0.2
HP-2530-48G(config-ext-nacl)# deny ip 172.16.4.0 0.0.1.255 host 10.0.0.7
HP-2530-48G(config-ext-nacl)# permit ip 172.16.4.0 0.0.1.255 any

CLI refernce guide Comware, Aruba , Cisco 

http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c04793912-4.pdf 

[keshavboodhun · Accepted solution]

It worked with my below commands.

# ip routing

# ip access-list extended ACCESS

permit ip 172.16.4.224 0.0.0.0 10.0.0.0 0.0.0.255

deny ip host 172.16.4.158 host 192.168.90.100

deny ip 172.16.4.0 0.0.1.255 host 10.0.0.7

permit ip 172.16.4.0 0.0.1.255 any

# vlan id_num

ip access-group ACCESS in