HP MSR2000/3000/4000 Router Series ACL and QoS Configuration Guide

11
Task Command
Display detailed ACL packet filtering information
(MSR2000/MSR3000).
display packet-filter verbose interface interface-type
interface-number { inbound | outbound } [ [ ipv6 ]
{ acl-number | name acl-name } ]
Display detailed ACL packet filtering information
(MSR4000).
display packet-filter verbose interface interface-type
interface-number { inbound | outbound } [ [ ipv6 ]
{ acl-number | name acl-name } ] [ slot slot-number ]
Clear ACL statistics.
reset acl [ ipv6 ] counter { acl-number | all | name
acl-name }
Clear match statistics (including the accumulated
statistics) and default action statistics for packet
filtering ACLs.
reset packet-filter statistics interface [ interface-type
interface-number ] { inbound | outbound } [ default |
[ ipv6 ] { acl-number | name acl-name } ]
ACL configuration example
Network requirements
A company interconnects its departments through Router A. Configure an ACL to:
• Permit access from the President's office at any time to the financial database server.
• Permit access from the Financial department to the database server only during working hours (from
8:00 to 18:00) on working days.
• Deny access from any other department to the database server.
Figure 1 Network diagram
Configuration procedure
# Create a periodic time range from 8:00 to 18:00 on working days.
<RouterA> system-view
[RouterA] time-range work 08:0 to 18:00 working-day