Comware

 View Only
Back to discussions
Expand all | Collapse all

H3C S5800 Switch (HP A5800) ACL Configuration

This thread has been viewed 0 times

  • 1.  H3C S5800 Switch (HP A5800) ACL Configuration

    Posted Mar 07, 2011 04:41 PM
    I am having quite a hard time understanding and implementing an ACL for our Public Wireless. I have a vlan that all public users are put into and get an ip address to correspond with that vlan. I then have attempted to apply the ACL to both the vlan and the individual ports but to no avail. display packet-filter all shows that the ACLS are running on the ports, but nothing seems to take affect.

    acl number 3198 name PublicOutbound
    rule 100 permit udp destination 10.1.1.1 0 destination-port eq bootpc
    rule 105 permit udp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0 destination-port eq dns
    rule 106 permit tcp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0 destination-port eq domain
    rule 109 permit icmp source 172.20.198.0 0.0.0.255 destination 172.20.198.1 0
    rule 110 permit icmp source 172.20.198.0 0.0.0.255 destination 172.20.198.254 0
    rule 111 permit icmp source 172.20.198.0 0.0.0.255 destination 10.1.1.1 0
    rule 200 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq www
    rule 205 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq 443
    rule 210 permit tcp source 172.20.198.0 0.0.0.255 destination-port eq 510
    rule 999 deny ip source 172.20.198.0 0.0.0.255

    acl number 3199 name PublicInbound
    rule 100 permit udp destination-port eq bootps
    rule 105 permit udp source 10.1.1.1 0 destination 172.20.198.0 0.0.0.255 destination-port eq dns
    rule 106 permit tcp source 10.1.1.1 0 destination 172.20.198.0 0.0.0.255 destination-port eq domain
    rule 110 permit icmp destination 172.20.198.0 0.0.0.255
    rule 200 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq www
    rule 205 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq 443
    rule 210 permit tcp destination 172.20.198.0 0.0.0.255 destination-port eq 510
    rule 999 deny ip destination 172.20.198.0 0.0.0.255


    Thanks for any help that anyone can provide.
    #ACLs


  • 2.  RE: H3C S5800 Switch (HP A5800) ACL Configuration

    Posted Jul 30, 2011 07:46 AM

    Hi There,

     

    I'm having the similar problem, did you manage to sort this out?

     

    I'd be interested to hear what you have done.

     

    Thanks!



Related Content