HPE Community
Aruba & ProVision-based
1758315 Members
2153 Online
108868 Solutions
New Discussion

Standard ACL not working ( Block IP Paket from a special destinaiton ip port x)

 
Tobisfr
Occasional Contributor

‎09-26-2019 05:40 AM - edited ‎09-26-2019 05:41 AM

‎09-26-2019 05:40 AM - edited ‎09-26-2019 05:41 AM

Standard ACL not working ( Block IP Paket from a special destinaiton ip port x)

Hi,

i want to block all packets from IP 10.1.1.52 that arrive on port 29 of my 2920 switch.

I set up an ACL

ip access-list standard "1"
10 deny 10.1.1.52 0.0.0.0 log
20 deny 10.1.3.104 0.0.0.0 log
30 permit 10.1.1.25 0.0.0.0
40 permit 10.1.4.104 0.0.0.0
50 permit 10.1.7.103 0.0.0.0
exit

And apllied it to port 29

interface 29
ip access-group "1" in
broadcast-limit 2
exit

But i can still ping from and to that ip.

Whats my fault?

0 Kudos
1 REPLY 1
drk787
HPE Pro

‎09-29-2019 09:43 PM

‎09-29-2019 09:43 PM

Re: Standard ACL not working ( Block IP Paket from a special destinaiton ip port x)

Hi

Try Extended access list with 'deny icmp ......' and apply on the interface.

Thank You!
I am an HPE Employee

Accept or Kudo

0 Kudos
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.