Comware

I am running an Aruba wireless network that sets up GRE tunnels to each AP. The wireless controllers are attached to an HP2824 that in turn is attached to a HP5304xl that sends traffic to the APs. I need to put a access list on the 5304 vlan to control student traffic. I haven't been able to figure out a way to allow gre traffic through the access list. Is there any way to specifically allow gre tunnel formation?

GRE is a ip protocol, like tcp and udp.
Procurve access lists only permit tcp, udp and ip filtering.
If you permit IP in the access list, you permit GRE too.