Table of Contents
Advertisement
Usage Guidelines
This command turns the session ACL from a blacklist to a whitelist. A rule must exist that explicitly permits the
session before it is forwarded to the controller and the last rule in the list denies everything else.
Example
The following command creates a whitelist ACL that allows on with the source address as 10.10.10.10 and the
source mask as 2.2.2.2. The protocol is FTP and the the bandwidth contract name is mycontract.
(host) (config-fw-cp) #permit 10.10.10.10 2.2.2.2 proto ftp bandwidth-contract name
mycontract
The following command creates a a whitelist ACL entry that denies traffic using protocol 2 on port 5000 from being
forwarded to the controller:
(host) (config-fw-cp) #deny proto 6 ports 5000 6000
Related Commands
Command
show firewall-cp
cp-bandwidth-contract
Command History
ArubaOS 3.4
ArubaOS 6.2
Command Information
Platform
Available on all platforms
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Description
Show Control Processor (CP) whitelist ACL info.
This command configures a bandwidth contract traffic
rate which can then be associated with a whitelist
session ACL.
Modification
Command introduced.
The permit <ip-addr><ip-mask> parameter was added.
The deny <ip-addr> parameter was added.
The any parameter was added.
The host parameter was added.
The ftp, http, https, icmp, snmp, ssh, telnet and tftp parameters were added.
License
Base operating system, except for noted
parameters
Mode
Enable or Config modes
Enable or Config modes
Command Mode
Config mode on master
controllers
firewall cp | 269
Advertisement
Table of Contents
