ProLiant BL p-Class GbE2 Interconnect Switch Application Guide

Quality of Service 78
ACL configuration examples
Configure Access Control Lists (CLI example)
The following configuration examples illustrate how to use Access Control Lists (ACLs) to block traffic. These basic
configurations illustrate common principles of ACL filtering.
NOTE: Each ACL filters traffic that ingresses on the port to which the ACL is added. The egrport classifier
filters traffic that ingresses the port to which the ACL is added, and then egresses the port specified by
egrport. In most common configurations, egrport is not used.
Example 1: Use this configuration to block traffic to a specific host.
>> Main# /cfg/acl/acl 1 (Define ACL 1)
>> ACL 1# ipv4/dip 100.10.1.116 255.255.255.255
>> Filtering IPv4# ..
>> ACL 1# action deny
>> ACL 1# /cfg/port 19/aclqos (Add ACL to port 19)
>> Port 19 ACL# add acl 1
>> Port 19 ACL# apply
>> Port 19 ACL# save
In this example, all traffic that ingresses on port 19 is denied if it is destined for the host at IP address
100.10.1.116.
Example 2: Use this configuration to block traffic from a network destined for a specific host address.
>> Main# /cfg/acl/acl 1 (Define ACL 1)
>> ACL 1# ipv4/sip 100.10.1.0 255.255.255.0
>> ACL 1# ipv4/dip 200.20.1.116 255.255.255.255
>> Filtering IPv4# ..
>> ACL 1# action deny
>> ACL 1# /cfg/port 19/aclqos (Add ACL to port 19)
>> Port 19 ACL# add acl 1
>> Port 19 ACL# apply
>> Port 19 ACL# save
In this example, all traffic that ingresses on port 19 with source IP from the class 100.10.1.0/24 and destination
IP 200.20.1.116 is denied.
Example 3: Use this configuration to block all traffic from a network that is destined for a specific egress port.
>> Main# /cfg/acl/acl 1 (Define ACL 1)
>> ACL 1# ipv4/sip 100.10.1.0 255.255.255.0
>> Filtering IPv4# ..
>> ACL 1# egrport 3
>> ACL 1# action deny
>> ACL 1# /cfg/port 19/aclqos (Add ACL to port 19)
>> Port 19 ACL# add acl 1
>> Port 19 ACL# apply
>> Port 19 ACL# save
In this example, all traffic that ingresses on port 19 from the network 100.10.1.0/24 and is destined for port 3
is denied.