HP 3 Com device need to block ping,SSH to WAN Port

[shinepothen]

Hi Team

Need your help and suggestion on how can i block ICMP and SSH traffic to my WAN port which is configured with public ip address

Router make and model

H3C Comware Platform Software
Comware Software, Version 5.20, Release 2514P07
Copyright (c) 2004-2015 Hangzhou H3C Tech. Co.

[shinepothen]

HI HP Team

Please help me in getting my issue fixed, all help and support is appreciated

[Paul Kurtz]

Hi,

You need to create an Acl then apply it to your WAN interface.

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c02659226#page13

Some examples here, you will need an advanced ACL.

[shinepothen]

Thank you Paul for the reply.

I tried to do some acl but the acl rule is not working.

I am new to HP router. it would be helpfull if you can give me an example of the acl commands that i need to enter and attach that acl to the wan interface.

Thank you for all the help and support.

[Paul Kurtz · Accepted solution]

Hi in the examples from link in my last post something like this i cant test because i have comware 7 MSR2003. use the ? Also see this post for settings http://thenetworkmonkey.blogspot.com/2012/10/hp-msr-firewall-config-example.html  

[DeviceA] system-view

[DeviceA] acl number 3000
[DeviceA-acl-adv-3000] rule deny any destination-port 22
[DeviceA-acl-adv-3000] rule deny any icmp 
[DeviceA-acl-adv-3000] quit
# Enable IPv4 firewall, and apply IPv4 ACL 3000 to filter outgoing packets on interface Ethernet 0/1.
[DeviceA] firewall enable
[DeviceA] interface ethernet 0/1
[DeviceA-Ethernet0/1] firewall packet-filter 3000 inbound
[DeviceA-Ethernet0/1] quit

[shinepothen]

Thank you Paul for providing all the help and support.

The mentioned commands help me a lot in getting the issue fixed.