2

I am trying to learn ACL on hp 2530. When I use : sh access-list command the following is displayed:

ACL-NAME-STR          Show detailed information for an ACL.
 config                Show all configured ACLs on the switch with the CLI
                       syntax used to create them.
 ports                 Show ACLs applied to the specified ports.
 radius                Show ACLs applied via RADIUS.
 resources             Show ACL resource usage and availability.
 vlan                  Show ACLs applied to the specified VLAN.

I have no idea how to configure vlan based ACL. Someone please Help.

3
  • 1
    please specify which device it is, unfortunately HP reuse the same number for different model line. Could be an Aruba 2530 switch or a Procurve 2530 switch for example, and I think there's also some 2530 in their router line. – JFL Nov 16 '17 at 16:58
  • As far as I know the Aruba 2530 and the HPE 2530 are identical except for the case. – Zac67 Nov 16 '17 at 17:55
  • Sorry its Aruba 2530 J9776A – Shruthi Nov 17 '17 at 11:25
5

First you define the rule, e.g. deny 192.168.1.1 DNS access anywhere, permit everything else: ip access-list extended "rulename" 10 deny udp 192.168.1.1/32 any eq 53 log 9999 permit ip any any exit

Then you apply the rule to the VLAN 99: vlan 99 ip access-group "rulename"

Edit: There's an implicit last entry deny ip any any that will drop all remaining traffic in the VLAN if not explicitly overridden. Since you're still familiarizing yourself with ACLs I wanted to make a point of this.

3
  • 9999 permit ip any any i don't understand the 9999, what is that in relation to the other commands? – user36472 Nov 16 '17 at 18:14
  • rules are applied in order .... 10 is the first, 9999 just a convention for "last rule", – jonathanjo Nov 16 '17 at 20:25
  • Room to insert more rules later. – Ricky Nov 16 '17 at 21:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.