- Community Home
- >
- Networking
- >
- Legacy
- >
- Switching and Routing
- >
- Re: 5412zl Core switch invalid input (access-group...
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-08-2021 01:12 PM - last edited on 08-08-2021 08:52 PM by support_s
08-08-2021 01:12 PM - last edited on 08-08-2021 08:52 PM by support_s
5412zl Core switch invalid input (access-group)
Hi All,
I've created an acl using the following command: (example)
ip access-list extended "wol-acl"
10 permit ip 10.10.160.26 0.0.0.0 0.0.0.0 255.255.255.255
20 permit ip 10.10.160.60 0.0.0.0 0.0.0.0 255.255.255.255
exit
But when running this command ip directed-broadcast access-group "wol-acl" it throws invalid input: access-group. Not sure why, I do have VLANS if this is the cause?
- Tags:
- Aruba
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-08-2021 02:45 PM
08-08-2021 02:45 PM
Re: 5412zl Core switch invalid input (access-group)
Hi @noadaz
Can you try below?
HP-Switch-5406zl#conf t
HP-Switch-5406zl(config)#ip directed-broadcast access-group wol-acl
If still not working then provide output of below command.
show access-list
show run | i wol-acl
I am an HPE Employee
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-08-2021 02:55 PM - edited 08-08-2021 03:05 PM
08-08-2021 02:55 PM - edited 08-08-2021 03:05 PM
Re: 5412zl Core switch invalid input (access-group)
NOA-Core-5412-01(config)# ip directed-broadcast access-group wol-acl
Invalid input: access-group
NOA-Core-5412-01(config)# show access-list
Access Control Lists
Type Appl Name
---- ---- ----------------------------------------------------------------
std no Access-To-CCTV-VLAN
ext no wol-acl
NOA-Core-5412-01(config)# show run|i wol-acl
ip access-list extended "wol-acl"
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-08-2021 03:29 PM
08-08-2021 03:29 PM
Re: 5412zl Core switch invalid input (access-group)
Provide me output of below command
NOA-Core-5412-01(config)# ip directed-broadcast ?
NOA-Core-5412-01(config)# ip directed-broadcast access-group ?
NOA-Core-5412-01# show system
NOA-Core-5412-01# show modules
I am an HPE Employee
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-08-2021 06:09 PM - edited 08-08-2021 06:10 PM
08-08-2021 06:09 PM - edited 08-08-2021 06:10 PM
Re: 5412zl Core switch invalid input (access-group)
Hello @noadaz ,
I tried the similar commands into LAB? and these commands are working fine.
Can you confirm if 'IP routing' is configured in the switch?
Also share chassis product/SKU number 'JXXXXX' of the switch by using 'show modules'
There is a limitation that 'ip directed-broadcast' is not supported on all platform.
HP-Switch-5406zl# show access-list
Access Control Lists
deny-fragmented-tcp-header : Disabled
deny-non-classifiable-layer4-header : Disabled
Type Appl Name
---- ---- ----------------------------------------------------------------
HP-Switch-5406zl# config t
HP-Switch-5406zl(config)# ip access-list extended "wol-acl"
HP-Switch-5406zl(config-ext-nacl)# 10 permit ip 10.10.160.26 0.0.0.0 0.0.0.0 255.255.255.255
HP-Switch-5406zl(config-ext-nacl)# 20 permit ip 10.10.160.60 0.0.0.0 0.0.0.0 255.255.255.255
HP-Switch-5406zl(config-ext-nacl)# exit
HP-Switch-5406zl(config)# ip directed-broadcast access-group "wol-acl"
HP-Switch-5406zl(config)# show access-list
Access Control Lists
deny-fragmented-tcp-header : Disabled
deny-non-classifiable-layer4-header : Disabled
Type Appl Name
---- ---- ----------------------------------------------------------------
ext yes wol-acl
For you reference sharing supported platform list:
Thanks!
![Accept or Kudo](/html/assets/hpe_banner_SME_signature.png)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-09-2021 12:17 AM - edited 08-09-2021 12:23 AM
08-09-2021 12:17 AM - edited 08-09-2021 12:23 AM
Re: 5412zl Core switch invalid input (access-group)
Hi @noadaz !
As @akg7 already suggested, you need to have 'ip routing' enabled on the switch. I've seen these errors before and they happen when it's not turned on.
Verify it by 'show run | i routing'. If you don't see 'ip routing' in the output, just execute following commands:
configure
ip routing
and try 'ip directed-broadcast access-group "wol-acl"' once again.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-09-2021 12:57 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-09-2021 01:01 AM
08-09-2021 01:01 AM
Re: 5412zl Core switch invalid input (access-group)
Maybe I'm a newbie here but I cannot get a question mark to appear?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-09-2021 01:13 AM - edited 08-09-2021 01:18 AM
08-09-2021 01:13 AM - edited 08-09-2021 01:18 AM
Re: 5412zl Core switch invalid input (access-group)
Hello @noadaz ,
Can you share the running software version and product number 'JXXXX' of the chassis?
'show version'
Thanks!
![Accept or Kudo](/html/assets/hpe_banner_SME_signature.png)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-09-2021 01:56 AM
08-09-2021 01:56 AM
Re: 5412zl Core switch invalid input (access-group)
Hi @akg7
Chassis number shared above and ...
NOA-Core-5412-01# show version
Image stamp:
/ws/swbuildm/maint_spokane_qaoff/code/build/btm(swbuildm_maint_spokane_qaoff_ma
int_spokane)
Jun 30 2021 22:36:22
K.16.02.0033
685
Boot Image: Primary
Boot ROM Version: K.15.30
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-09-2021 02:36 AM
08-09-2021 02:36 AM
Re: 5412zl Core switch invalid input (access-group)
Hello @noadaz,
Device is running on latest version and no such bug reported.
As a part of troubleshooting, can you try to configure again with different string:
ip access-list extended <any other string>
10 permit ip 10.10.160.26 0.0.0.0 0.0.0.0 255.255.255.255
20 permit ip 10.10.160.60 0.0.0.0 0.0.0.0 255.255.255.255
exit
ip directed-broadcast access-group <new string>
Thanks!
![Accept or Kudo](/html/assets/hpe_banner_SME_signature.png)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-09-2021 01:30 PM
08-09-2021 01:30 PM
Re: 5412zl Core switch invalid input (access-group)
Hi @akg7 @Ivan_B @Rajendra_Jena
Thank you for all your replies, was actually very helpful - found the cause thanks to your prompts! Previously I was on an old version until I upgraded today! So the access-group now works...
Next question though! How do I get this forwarded across swicthes and VLAN's, it's like a minefiled!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-09-2021 07:13 PM
08-09-2021 07:13 PM
Re: 5412zl Core switch invalid input (access-group)
Hello @noadaz ,
ACL can be applied to any other interface like VLAN, port and tunnel.
You can refer below link for configuration guide and see section 'Enabling forwarding of IP directed broadcasts' on pg.138
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00091313en_us
I hope this will help you.
Thanks!
![Accept or Kudo](/html/assets/hpe_banner_SME_signature.png)