Filter
Top Products
Using Access Control Lists (ACLs)
7. Select the Save
link at the bottom of the dialog. Select Yes when prompted to save the configuration change
to the startup-config file on the device’s flash memory.
Disabling ACL Mode
If the ACL mode is enabled, a message is displayed when you try to apply an IP access policy to a port, as shown
in the following CLI example:
HP9300(config-if-e1000-1/1)# ip access-policy-group 1 in
Must disable ACL mode first by using ip dont-use-acl command, write memory and
reload
To use the IP access policies, you first must disable the ACL mode using either of the following methods.
USING THE CLI
To disable the ACL mode, enter the following commands:
HP9300(config-if-e1000-1/1)# exit
HP9300(config)# ip dont-use-acl
HP9300(config)# write memory
HP9300(config)# end
HP9300# reload
USING THE WEB MANAGEMENT INTERFACE
1. Log on to the device using a valid user name and password for read-write access. The System configuration
panel is displayed.
2. Click on the plus sign next to Configure in the tree view to expand the list of configuration options.
3. Click on the plus sign next to IP in the tree view to expand the list of IP option links.
4. Click on the General
link to display the IP configuration panel.
5. Select the Disable radio button next to Access Control List.
6. Click the Apply button to save the change to the device’s running-config file.
7. Select the Save
link at the bottom of the dialog. Select Yes when prompted to save the configuration change
to the startup-config file on the device’s flash memory.
Configuring Standard ACLs
This section describes how to configure standard ACLs with numeric IDs.
• For configuration information on named ACLs, see “Configuring Named ACLs” on page 3-18.
• For configuration information on extended ACLs, see “Configuring Extended ACLs” on page 3-9.
Standard ACLs permit or deny packets based on source IP address. You can configure up to 99 standard ACLs.
You can configure up to 1024 individual ACL entries on a device. There is no limit to the number of ACL entries an
ACL can contain except for the system-wide limitation of 1024 total ACL entries.
USING THE CLI
To configure a standard ACL and apply it to outgoing traffic on port 1/1, enter the following commands.
HP9300(config)# access-list 1 deny host 209.157.22.26 log
HP9300(config)# access-list 1 deny 209.157.29.12 log
HP9300(config)# access-list 1 deny host IPHost1 log
HP9300(config)# access-list 1 permit any
HP9300(config)# int eth 1/1
HP9300(config-if-1/1)# ip access-group 1 out
HP9300(config)# write memory
3 - 5