Acl Configuration Example; Network Requirements - HP 5920 Configuration Manual

Task
Display ACL configuration and match statistics.
Display whether an ACL has been successfully applied
to an interface for packet filtering).
Display match statistics for packet filtering ACLs.
Display the accumulated statistics for packet filtering
ACLs.
Display detailed ACL packet filtering information.
Display QoS and ACL resource usage.
Clear ACL statistics.
Clear match statistics (including the accumulated
statistics) for packet filtering ACLs.

ACL configuration example

Network requirements

A company interconnects its departments through Device A. Configure an ACL to:
Permit access from the President's office at any time to the financial database server.
•
• Permit access from the Financial department to the database server only during working hours (from
8:00 to 18:00) on working days.
Deny access from any other department to the database server.
•
Command
display acl [ ipv6 ] { acl-number | all | name
acl-name }
display packet-filter { interface [ interface-type
interface-number ] [ inbound | outbound ] | { interface
vlan-interface vlan-interface-number [ vlan-id ] }
[ inbound | outbound ] [ slot slot-number ] }
display packet-filter statistics interface interface-type
interface-number { inbound | outbound } [ [ ipv6 ]
{ acl-number | name acl-name } ] [ brief ]
display packet-filter statistics sum { inbound |
outbound } [ ipv6 ] { acl-number | name acl-name }
[ brief ]
display packet-filter verbose interface interface-type
interface-number { inbound | outbound } [ [ ipv6 ]
{ acl-number | name acl-name } ] [ slot slot-number ]
display qos-acl resource [ slot slot-number ]
reset acl [ ipv6 ] counter { acl-number | all | name
acl-name }
reset packet-filter statistics { global | interface
[ interface-type interface-number ] | vlan [ vlan-id ] }
{ inbound | outbound } [ default | [ ipv6 ] { acl-number
| name acl-name } ]
10