Selecting The Packet And Controlling The Action - HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual

Table 5-6. Locating Information about Applying ACLs
Topic
applying ACLs to an ACP
applying ACLs to FTP, HTTP, and Telnet traffic destined to the
router
applying ACLs to allow routing updates
applying ACLs to an ACP for NAT
applying ACLs to a QoS map
applying ACLs to a crypto map for a VPN
applying ACLs to a route map for PBR
applying an ACL to a demand interface to select interesting
traffic
applying an ACL to an RP to select the multicast groups that it
can support

Selecting the Packet and Controlling the Action

When you assign an ACL directly to an interface, the Secure Router OS uses
it to both to select traffic and to determine which action it should take on this
traffic. The Secure Router OS permits traffic selected by a permit entry and
blocks traffic selected by a deny entry.
For each interface, you can assign one ACL to control inbound traffic and one
ACL to control outbound traffic. To assign an ACL to an interface, enter the
following command from the configuration mode context for the appropriate
interface:
Syntax: ip access-group <listname> [in | out]
Replace <listname> with the name of the ACL. Use the in option to have the
Secure Router OS apply the ACL to traffic when it is received on the interface;
use the out option to have the Secure Router OS apply the ACL to traffic when
it is sent from the interface.
For example, to assign the WAN ACL to outgoing traffic on the PPP 1 interface,
you would move to the PPP 1 interface configuration mode context and enter:
ProCurve(config-ppp 1)# ip access-group WAN out
Applying Access Control to Router Interfaces
Using ACLs Alone to Configure Access Control
Page
5-25
5-21
5-24
6-15
7-22, 7-38
8-38
13-126
8-18
11-31
5-19