HP 7102dl - ProCurve Secure Router Configuration Manual page 298

Applying Access Control to Router Interfaces
Quick Start
N o t e
5-66
4. From the global configuration mode context, enter the following com-
mand to create an ACP:
Syntax: ip policy-class <policyname>
Replace <policyname> with a unique name that is a maximum of 255
alphanumeric characters.
You are moved to the policy class configuration mode context.
5. Create entries to allow packets selected by an ACL or to deny packets
selected by an ACL:
Syntax: allow list <listname>
Syntax: discard list <listname>
You can also NAT the packets selected by an ACL. This option is discussed in
Chapter 6: Configuring Network Address Translation.
The order in which you create entries in the ACP affects how the policy
is enforced. The first entry you create is the first entry processed. After
the Secure Router OS firewall matches a packet to an ACL and performs
the action specified in the corresponding ACP entry, it stops processing
the ACP.
6. To apply the ACP to an interface, move to the configuration mode context
for that interface:
ProCurve(config)# interface <interface> <number>
Valid interfaces include PPP interfaces, Frame Relay subinterfaces, ATM
subinterfaces, HDLC interfaces, Ethernet interfaces, and demand inter-
faces. (If you have enabled support for virtual LANs [VLANs], you must
apply the ACL to an Ethernet subinterface.)
7. Apply the ACP to the interface by entering the following command from
the appropriate interface configuration mode context:
Syntax: access-policy <policyname>
For example, if you want to apply the WAN ACP to the PPP 1 interface,
enter:
ProCurve(config-ppp 1)# access-policy WAN
For more information about using ACPs to control access to a router
interface, read the detailed explanation in this chapter.