Cloud Managed Networks

 View Only
  • 1.  ACLs in Central Managed switches

    Posted Apr 11, 2025 11:16 AM

    Another probably easy question for the community.  I have a series of 6300F switches managed by Central.  How do I go about adding ACL entries on these switches?  I cannot do it via CLI, and I'm not sure where to add the command (or the syntax for that matter) using Multiedit.    I see there is an Access Policy section, but that also does not seem very intuitive to me.  What is the method to go about doing this?

    My end goal is simple....just trying to restrict some access to the switch such as:

    access-list ip AUTHORIZED-MANAGERS
    10 comment IT DIRECTOR
    10 permit any {IP ADDRESS} any
    20 comment IT SYSTEMS ADMIN
    20 permit any {IP ADDRESS} any
    30 permit any {IP ADDRESS} any
    40 permit any {IP ADDRESS} any
    50 permit any {IP ADDRESS} any
    60 permit any {IP ADDRESS} any
    70 deny any any {MANAGEMENT IP ADDRESS OF THE SWITCH}
    80 permit any any any

    Thanks!



  • 2.  RE: ACLs in Central Managed switches

    Posted Apr 11, 2025 08:46 PM

    you can refer to the  ACLS and Classifier Policies Guide  to get the syntax and see some examples, and then use multi Edit to add your ACL.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: ACLs in Central Managed switches

    Posted Apr 12, 2025 09:16 AM

    Thanks.  So just add the commands to the end of the multiedit window?




  • 4.  RE: ACLs in Central Managed switches

    Posted Apr 12, 2025 09:08 PM

    yes thats basically it.

    check this link "Configuring and Viewing AOS-CX Switches in MultiEdit Mode"



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------