HP Procurve 5412z Deny list not working

[Mikey Webb]

I have a wireless vlan that is 192.168.77.x I would like this be separate from all the other vlans that are all 192.168.x.x. I setup a few lists but I can't get the deny or the permit to work. I need to allow 192.168.45.15 but deny everything else.

This is what I have.

ip access-list extended "Guest"
10 permit udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 67
20 permit udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 53
25 permit ip 0.0.0.0 255.255.255.255 192.168.45.15 0.0.0.0
30 deny ip 0.0.0.0 255.255.255.255 192.168.0.0 0.0.255.255
40 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
exit
ip access-list connection-rate-filter "guest"

I can get to everything nothing is being denied. I am not sure where to go from here.

[Michael_Breuer]

Hi Mikey,

did you apply the ACL to any VLAN? Check the "sh access-list" output and verify. If not you need to map it to a VLAN with the "ip access-group" command.

See:
http://cdn.procurve.com/training/Manuals/3500-5400-6200-8200-ASG-Jan08-10-ACLs.pdf

Cheers,

Michael

[Patrick Terlisten]

Hello,

you should add this ACL to a VLAN. Go to the VLAN context and try a

ip access-group guest in

Regards,
Patrick

[Mikey Webb]

I found the problem, the ACL was correct I was looking in the wrong place.

The previous person named the Vlan "Guests" not that it would matter that much, but he added guests to the Guests vlan. I changed everything to be Guest and it worked fine. Added Guest instead of guests would have fixed the problem.

I found that consistency and caps are important!

Thanks for your help.