Defining The Source And Destination Addresses - HP ProCurve Secure 7000dl Series Basic Management And Configuration Manual

Configuring Demand Routing for Primary ISDN Modules
Using Demand Routing for ISDN Connections
8-20
For demand routing, you might want to create an ACL that selects all of the
traffic to a particular subnet. In this case, you should specify ip as the protocol.

Defining the Source and Destination Addresses

When you create an extended ACL, you must configure both a source and a
destination address for each entry. You specify the source address first and
then you specify the destination address.
To specify the source address and the destination address, use the following
syntax:
[any | host {<A.B.C.D> | <hostname>} | <A.B.C.D> <wildcard bits>]
Table 8-4 lists the options you have for specifying both the source address and
the destination address.
Table 8-4. Options for Specifying Source and Destination Addresses in an ACL
Option
any
host [<A.B.C.D> | <hostname>]
<A.B.C.D> <wildcard bits>
For example, you may want any traffic to the far-end network to trigger the
dial-up connection. If the far-end network has a network address of
192.168.115.0 /24, enter:
ProCurve(config-ext-nacl)# permit ip any 192.168.115.0 0.0.0.255
If you want any outbound traffic from a particular network segment to trigger
a dial-up connection, enter:
ProCurve(config-ext-nacl)# permit ip 192.168.1.0 0.0.0.255 any
You might want the IP traffic from a specific host to a specific destination to
trigger an ISDN connection. In this case, enter:
ProCurve(config-ext-nacl)# permit ip host 192.168.1.1 host 192.168.115.100
Using Wildcard Bits. You use wildcard bits to permit or deny a range of IP
addresses. Wildcard bits determine which bits in the specified address the
Secure Router OS should match to a packet and which address bits it should
ignore. When you enter wildcard bits, you use a 0 to indicate that the Secure
Meaning
match all hosts
specify a single IP address or a single host
specify a range of IP addresses