10-54
IPv4 Access Control Lists (ACLs)
Configuring Standard ACLs
Example of Creating and Listing a Standard, Named ACL. This exam-
ple illustrates how to create a standard, named ACL with several ACEs. This
example creates an ACL that:
1. permits IPv4 traffic from a host with the address of 10.10.10.104
2. creates another ACE that blocks all other IPv4 traffic from the same
subnet
3. allows all other IPv4 traffic
Figure 10-14. Example of Commands Used To Create an Standard, Named ACL
[ log]
This option generates an ACL log message if:
• The action is deny.
• There is a match.
• ACL logging is enabled on the switch. (Refer to “Enable ACL
“Deny” Logging” on page 10-112.)
(Use the debug command to direct ACL logging output to the
current console session and/or to a Syslog server. Note that you
must also use the logging < ip-addr > command to specify the
addresses of Syslog servers to which you want log messages
sent. See also “Enable ACL “Deny” Logging” on page 10-112.)
HP Switch(config)# ip access-list standard Sample-List
HP Switch(config-std-nacl)# permit host 10.10.10.104
HP Switch(config-std-nacl)# deny 10.10.10.1/24 log
HP Switch(config-std-nacl)# permit any
HP Switch(config-std-nacl)# exit
HP Switch(config)#
Creates the “Sample-List”
ACL and enters the “Named
ACL” context for this list.
Appends three ACEs to the
list in the order shown.
Exits from the nacl context.
To Next Page
Loading...
Need help?
General
