Reference Guide

Usage Guidelines
This command turns the session ACL from a blacklist to a whitelist. A rule must exist that explicitly permits the
session before it is forwarded to the controller and the last rule in the list denies everything else.
Example
The following command creates a whitelist ACL that allows on with the source address as 10.10.10.10 and the
source mask as 2.2.2.2. The protocol is FTP and the the bandwidth contract name is mycontract.
(host) (config-fw-cp) #permit 10.10.10.10 2.2.2.2 proto ftp bandwidth-contract name
mycontract
The following command creates a a whitelist ACL entry that denies traffic using protocol 2 on port 5000 from being
forwarded to the controller:
(host) (config-fw-cp) #deny proto 6 ports 5000 6000
Related Commands
Command Description Mode
show firewall-cp
Show Control Processor (CP) whitelist ACL info. Enable or Config modes
cp-bandwidth-contract
This command configures a bandwidth contract traffic
rate which can then be associated with a whitelist
session ACL.
Enable or Config modes
Command History
Modification
ArubaOS 3.4 Command introduced.
ArubaOS 6.2 The permit <ip-addr><ip-mask> parameter was added.
The deny <ip-addr> parameter was added.
The any parameter was added.
The host parameter was added.
The ftp, http, https, icmp, snmp, ssh, telnet and tftp parameters were added.
Command Information
Platform License Command Mode
Available on all platforms Base operating system, except for noted
parameters
Config mode on master
controllers
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide firewall cp | 269