HP ProCurve 6120G/XG Manual page 368

IPv4 Access Control Lists (ACLs)
Configuring and Assigning an ACL
In a situation opposite to the above, suppose that you wanted to deny inbound
IP traffic received on port 20 from 10. 128.93.17 and 10.130.93.25, but permit
all other IP traffic on this VLAN. The next ACL achieves this:
ProCurve Switch 2610-24(config)# access-list 60 deny host 10.128.93.17
ProCurve Switch 2610-24(config)# access-list 60 deny host 10.28.93.25
ProCurve Switch 2610-24(config)# access-list 60 permit any
ProCurve Switch 2610-24(config)# interface 20 ip access-group 60 in
ProCurve Switch 2610-24(config)# write mem
ProCurve Switch 2610-24(config)# show config
Startup configuration:
; J9085A Configuration Editor; Created on release #R.11.XX
hostname "ProCurve Switch 2610-24"
snmp-server contact "Allen Smith"
snmp-server location "Building P"
ip access-list standard "50"
permit 10.128.100.10 0.0.0.0
permit 10.128.100.27 0.0.0.0
permit 10.128.80.14 0.0.0.0
exit
ip access-list standard "60"
deny 10.128.93.17 0.0.0.0
deny 10.28.93.25 0.0.0.0
permit 0.0.0.0 255.255.255.255
exit
interface 10
access-group "50" in
exit
interface 20
access-group "60" in
exit
ip default-gateway 15.255.152.1
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged 1-28
ip address dhcp-bootp
exit
Figure 9-14. Example of Configuring a Standard ACL To Deny Inbound Traffic from Specific IP Addresses
9-44
Show config lists any ACLs
and ACL assignments
configured in the startup­
config.
ACL "50" from the
preceding example.
ACL "60" is assigned to
filter inbound traffic on port
20.
ACL "60" is listed in the
switch configuration.
Denies IP traffic from the
indicated IP address. Since, for
this example, ACL 60 is a new
list, this command also creates
the ACL.
Denies IP traffic from the
indicated IP address.
Permits IP traffic from all
sources. (Traffic from the IP
sources in the first two lines is
already filtered and dropped.)
The deny any with which the
switch implicitly concludes all
ACLs is preempted by this ACE
(but is still present in the ACL).