Using Access Control Lists (ACLs)

7.Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to the startup-config file on the device’s flash memory.

Disabling ACL Mode

If the ACL mode is enabled, a message is displayed when you try to apply an IP access policy to a port, as shown in the following CLI example:

HP9300(config-if-e1000-1/1)# ip access-policy-group 1 in

Must disable ACL mode first by using ip dont-use-acl command, write memory and reload

To use the IP access policies, you first must disable the ACL mode using either of the following methods.

USING THE CLI

To disable the ACL mode, enter the following commands:

HP9300(config-if-e1000-1/1)# exit

HP9300(config)# ip dont-use-acl

HP9300(config)# write memory

HP9300(config)# end

HP9300# reload

USING THE WEB MANAGEMENT INTERFACE

1.Log on to the device using a valid user name and password for read-write access. The System configuration panel is displayed.

2.Click on the plus sign next to Configure in the tree view to expand the list of configuration options.

3.Click on the plus sign next to IP in the tree view to expand the list of IP option links.

4.Click on the General link to display the IP configuration panel.

5.Select the Disable radio button next to Access Control List.

6.Click the Apply button to save the change to the device’s running-config file.

7.Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change to the startup-config file on the device’s flash memory.

Configuring Standard ACLs

This section describes how to configure standard ACLs with numeric IDs.

•For configuration information on named ACLs, see “Configuring Named ACLs” on page 3-18.

•For configuration information on extended ACLs, see “Configuring Extended ACLs” on page 3-9.

Standard ACLs permit or deny packets based on source IP address. You can configure up to 99 standard ACLs. You can configure up to 1024 individual ACL entries on a device. There is no limit to the number of ACL entries an ACL can contain except for the system-wide limitation of 1024 total ACL entries.

USING THE CLI

To configure a standard ACL and apply it to outgoing traffic on port 1/1, enter the following commands.

HP9300(config)# access-list 1 deny host 209.157.22.26 log

HP9300(config)# access-list 1 deny 209.157.29.12 log

HP9300(config)# access-list 1 deny host IPHost1 log

HP9300(config)# access-list 1 permit any

HP9300(config)# int eth 1/1

HP9300(config-if-1/1)# ip access-group 1 out

HP9300(config)# write memory

3 - 5