HP ProCurve 7102dl Reference Manual page 930

SROS Command Line Interface Reference Guide
ip access-group <listname> [in | out]
Use the ip access-group command to create an access list to be used for packets transmitted on or received
from the specified interface. Use the no form of this command to disable this type of control.
Syntax Description
<listname>
in
out
Default Values
By default, these commands are disabled.
Functional Notes
When this command is enabled, the IP destination address of each packet must be processed by the
assigned access-list parameters before being passed through to the router system. If the packet is not
acceptable per these settings, it is dropped.
Usage Examples
The following example sets up the router to only allow Telnet traffic into the Frame Relay sub-interface:
ProCurve(config)#interface frame relay 1.16
ProCurve(config)#ip access-list extended TelnetOnly
ProCurve(config-ext-nacl)#permit tcp any any eq telnet
ProCurve(config-ext-nacl)#int frame-relay 1.16
ProCurve(config-fr 1.16)#ip access-group TelnetOnly in
5991-2114
Specifies the IP access list name.
Enables access control on packets received on the specified interface.
Enables access control on packets transmitted on the specified interface.
© Copyright 2007 Hewlett-Packard Development Company, L.P.
Frame Relay Sub-Interface Config Command Set
928