HP E3800-24G-PoE+-2SFP+ Access Security Manual page 434

IPv4 Access Control Lists (ACLs)
Configuring Standard ACLs
HP Switch(config)# ip access-list standard Sample-List
HP Switch(config-std-nacl)# permit host 10.10.10.104
HP Switch(config-std-nacl)# deny 10.10.10.1/24 log
HP Switch(config-std-nacl)# permit any
HP Switch(config-std-nacl)# exit
HP Switch(config)# _
Figure 10-14. Example of Commands Used To Create an Standard, Named ACL
10-54
[ log]
This option generates an ACL log message if:
• The action is deny.
• There is a match.
• ACL logging is enabled on the switch. (Refer to "Enable ACL
"Deny" Logging" on page 10-112.)
(Use the debug command to direct ACL logging output to the
current console session and/or to a Syslog server. Note that you
must also use the logging < ip-addr > command to specify the
addresses of Syslog servers to which you want log messages
sent. See also "Enable ACL "Deny" Logging" on page 10-112.)
Example of Creating and Listing a Standard, Named ACL. This exam-
ple illustrates how to create a standard, named ACL with several ACEs. This
example creates an ACL that:
1. permits IPv4 traffic from a host with the address of 10.10.10.104
2. creates another ACE that blocks all other IPv4 traffic from the same
subnet
3. allows all other IPv4 traffic
Creates the "Sample-List"
ACL and enters the "Named
ACL" context for this list.
Appends three ACEs to the
list in the order shown.
Exits from the nacl context.