HP 7102dl - ProCurve Secure Router Configuration Manual page 237

Access Control Advantages
Mechanism
ACLs • easier to configure
• filter both incoming and outgoing traffic
ACPs • provide more flexibility
• allow you to NAT traffic
ACPs also allow you to perform certain actions on traffic that ACLs do not.
For example, you must use an ACP to configure Network Address Translation
(NAT) on the ProCurve Secure Router. (For more information about NAT, see
Chapter 6: Configuring Network Address Translation.)
Table 5-2 lists the main differences between ACLs and ACPs.
Table 5-2. Comparing ACLs and ACPs
on an interface
– allow you to apply an unlimited number of
ACLs to an interface
The remainder of this chapter is divided into four main sections:
using ACLs alone to configure access controls on router interfaces
using ACPs to configure access controls on router interfaces
viewing ACLs and ACPs
troubleshooting ACLs and ACPs
Applying Access Control to Router Interfaces
Access Control for Interfaces on the ProCurve Secure Router
Disadvantages
• support only one ACL to filter the incoming
traffic on an interface and one ACL to filter
the outgoing traffic on an interface
• can be more difficult to understand and
configure
5-5