Access Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches
Terminology
Action Command Page
Displaying ACL Data HPswitch(config)# show access-list
HPswitch(config)# show access-list [ acl-name-string ]
HPswitch(config)# show access-list config
HPswitch(config)# show access-list ports < port-list >
HPswitch(config)# show access-list resources
HPswitch(config)# access-list resources help
HPswitch(config)# show config
HPswitch(config)# show running
10-
58
Terminology
3400cl/6400cl Switches: An all-inclusive reference to the HP ProCurve
3400cl and 6400cl switches.
Access Control Entry (ACE): An ACE is a policy consisting of criteria and
an action to take (permit or deny) on a packet if it meets the criteria. The
elements composing the criteria include:
• Source IP address and mask (standard and extended ACLs)
• Destination IP address and mask (extended ACLs only)
• TCP or UDP application port numbers (optional, extended ACLs only)
Access Control List (ACL): A list (or set) consisting of one or more
explicitly configured Access Control Entries (ACEs) and terminating with
an implicit “deny” default which drops any packets that do not have a
match with any explicit ACE in the named ACL. The two classes of ACLs
are “standard” and “extended”. See “Standard ACL” and “Extended ACL”.
ACE: See “Access Control Entry”.
ACL: See “Access Control List”.
ACL ID: A number or alphanumeric string used to identify an ACL. A standard
ACL ID can have either a number from 1 to 99 or an alphanumeric string.
An extended ACL ID can have either a number from 100 to 199 or an
alphanumeric string.
10-6