- Community Home
- >
- Networking
- >
- Legacy
- >
- Switching and Routing
- >
- Re: How to enable set ACL in HPE 5510 VTY Line?
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-01-2021 06:54 PM - last edited on тАО09-01-2021 11:27 PM by support_s
тАО09-01-2021 06:54 PM - last edited on тАО09-01-2021 11:27 PM by support_s
Hi,
I am replacing HP A5500-24G switch to HPE 5510 24G switch.
How to enable set ACL in HPE 5510 VTY Line?
There is no ACL command.
#
line vty 0 63
authentication-mode scheme
user-role network-operator
protocol inbound ssh
#
In HP A5500-24G Switch, VTY was set to ACL.
#
user-interface vty 0 15
acl 2001 inbound
authentication-mode scheme
protocol inbound ssh
#
Thank you.
Hideo Hirose
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-01-2021 07:27 PM - edited тАО09-01-2021 07:32 PM
тАО09-01-2021 07:27 PM - edited тАО09-01-2021 07:32 PM
Re: How to enable set ACL in HPE 5510 VTY Line?
Hello @Hideo ,
Kindly refer below link for configuration guide for ACL:
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00007121en_us
Thanks!
![Accept or Kudo](/html/assets/hpe_banner_SME_signature.png)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-01-2021 07:36 PM
тАО09-01-2021 07:36 PM
Re: How to enable set ACL in HPE 5510 VTY Line?
Thank you for your reply.
Software version: HPE Comware Software, Version 7.1.070, Release 3507
Image file: 5510hi-cmw710-system-r3507.bin
Thank you.
Hideo Hirose
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-01-2021 07:44 PM
тАО09-01-2021 07:44 PM
Re: How to enable set ACL in HPE 5510 VTY Line?
Thank you for your reply.
This manual did not include an ACL to VTY.
Thanks.
Hideo Hirose
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-01-2021 08:31 PM
тАО09-01-2021 08:31 PM
Re: How to enable set ACL in HPE 5510 VTY Line?
Hello @Hideo ,
ACL option is not available under line vty interface in comware 7. Its strange but I believe the reason is comware 7 has defined user roles option in line vty interface compare to comware 5.
Comware 7:
[HPE]user-role ?
STRING<1-63> User role name
network-admin
network-operator
level-0
level-1
level-2
level-3
level-4
level-5
level-6
level-7
level-8
level-9
level-10
level-11
level-12
level-13
level-14
level-15
security-audit
guest-manager
What is your acl tule in comware 5?
Thanks!
![Accept or Kudo](/html/assets/hpe_banner_SME_signature.png)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-01-2021 10:10 PM
тАО09-01-2021 10:10 PM
Re: How to enable set ACL in HPE 5510 VTY Line?
Hello
This is the original ACL.
#
acl number 2001
rule 0 permit source 172.31.1.0 0.0.0.255
#
#
user-interface vty 0 15
acl 2001 inbound
authentication-mode scheme
protocol inbound ssh
#
I want to reflect this in the new switch.
Thanks.
Hideo Hirose
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-02-2021 01:10 AM - edited тАО09-02-2021 01:27 AM
тАО09-02-2021 01:10 AM - edited тАО09-02-2021 01:27 AM
SolutionHi @Hideo !
In Comware 7 each management protocol can be protected by separate ACL, so the logic is slightly different than in Comware 5. SSH can be protected by one ACL, Telnet by another and they both can co-exist under one VTY line.
Here is an official document describing this change - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=sf000005606en_us
Therefore I believe this is what you are looking for:
#
acl number 2001
rule 0 permit source 172.31.1.0 0.0.0.255
#
ssh server enable
ssh server acl 2001
#
line vty 0 15
authentication-mode scheme
protocol inbound ssh
#
Also, there is one command that helps a lot during SSH ACL troubleshooting phase - 'ssh server acl-deny-log enable'. Use it to enable logging for SSH login attempts that are denied by the SSH login control ACL. You can remove it afterwards with 'undo ssh server acl-deny-log enable' afterwards.
Hope this helps!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-02-2021 03:49 AM
тАО09-02-2021 03:49 AM
Re: How to enable set ACL in HPE 5510 VTY Line?
Hello Ivan_B
Thank you very much.
I was able to confirm the operation of ACL.
Thank you very much for helping me.
thanks