- Community Home
- >
- Networking
- >
- Switching and Routing
- >
- HPE Aruba Networking & ProVision-based
- >
- HP Procurve 2920 - ip access-list extended "100" -...
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-11-2017 06:35 AM - edited 08-11-2017 08:38 AM
08-11-2017 06:35 AM - edited 08-11-2017 08:38 AM
HP Procurve 2920 - ip access-list extended "100" - Not working?
Hi All,
I'm having some issues getting an extended access list working for our GUEST WIFI. I'm trying to block that VLAN from connecting anywhere but the internet so those devices cannot communicate with eachother or anyone within our LAN. The configuration on my CORE COMWARE switch works fine but I'm unable to apply the same type of configuration onto my procurves.
This is my configuration:
CORE SWITCH:
acl number 3000
description Inbound PUBWIFI Restrictions
rule 3 permit ip destination 192.168.253.4 0
rule 4 deny ip destination 192.168.0.0 0.0.255.255
rule 5 deny ip destination 10.0.0.0 0.255.255.255
rule 10 deny ip destination 172.16.0.0 0.15.255.255
rule 15 permit ip
#
vlan 15
name 172.31.255.0/24 - PubWiFi
#
interface Vlan-interface15
ip address 172.31.255.1 255.255.255.0
dhcp select relay
dhcp relay server-select 1
packet-filter 3000 inbound
#
ip route-static 0.0.0.0 0.0.0.0 192.168.253.1
PROCURVE 2920:
ip access-list extended "100"
20 deny ip 0.0.0.0 255.255.255.255 192.168.0.0 0.0.255.255
30 deny ip 0.0.0.0 255.255.255.255 10.0.0.0 0.255.255.255
40 deny ip 0.0.0.0 255.255.255.255 172.16.0.0 0.15.255.255
50 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit
#
vlan 15
name "PubWiFi"
tagged 1-46,Trk1
ip access-group 100 vlan
no ip address
exit
The above ends up blocking all traffic including internet. Was thinking maybe my access list is backwards since I'm not controlling the direction like I am on my CORE switch so I tried the opposite:
ip access-list extended "101"
10 deny ip 192.168.0.0 0.0.255.255 0.0.0.0 255.255.255.255
20 deny ip 10.0.0.0 0.255.255.255 0.0.0.0 255.255.255.255
30 deny ip 172.16.0.0 0.15.255.255 0.0.0.0 255.255.255.255
40 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
Any help would be appreciated.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-24-2017 07:23 AM
08-24-2017 07:23 AM
Re: HP Procurve 2920 - ip access-list extended "100" - Not working?
Anyone? Am I missing information?