Access Control Mechanisms - HP 7102dl - ProCurve Secure Router Configuration Manual

Applying Access Control to Router Interfaces
Access Control for Interfaces on the ProCurve Secure Router
Interface Usage
E1 1/1 and PPP 1 connection to
interfaces branch office
5-4
Table 5-1. Evaluating Traffic Patterns on Your WAN
Traffic That Must Be
Transmitted
• routing updates
• data transfers
between accounting
departments
at each office (IP
subnets 192.168.115.0 /
24 and 192.168.15.0 /24)
• data transfers
between marketing
department at each
office (IP subnet
192.168.116.0 /24 and
192.168.16.0 /24)

Access Control Mechanisms

The ProCurve Secure Router OS provides two mechanisms for filtering traffic:
access control lists (ACLs)
access control policies (ACPs)
You can use ACLs alone or in combination with ACPs. By themselves, ACLs
are easier to configure than ACPs. If you have experience configuring access
control on Cisco routers, you will find that the process of configuring ACLs
on the ProCurve Secure Router is very similar.
In addition, when you use ACLs by themselves, you can filter both incoming
and outgoing traffic on an interface. When you use ACPs, on the other hand,
you can filter only incoming traffic on an interface.
In general, however, ACPs provide more flexibility in configuring access
controls than ACLs do. For example, using an ACP, you can apply more than
two ACLs to an interface. You can essentially apply an unlimited number of
ACLs to an interface.
Outgoing Traffic That Incoming Traffic That
Should Should
Be Blocked Be Blocked
• telemarketing • all branch office users
department (IP
subnet 192.168.114.0
/24) browsing
network at branch
• FTP and Telnet
office
• FTP requests
except accounting,
marketing, and
management
requests