Introduction - HP ProCurve 5300xl Series Management Manual

Notes

Introduction

This chapter applies only to the Series 5300xl Switches. For ACL operation
on Series 3400cl and Series 6400clswitches, refer to the chapter 10, "Access
Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches".
Feature
Numbered ACLs
Standard ACLs
Extended ACLs
Named ACLs
Enable or Disable an ACL
Display ACL Data
Delete an ACL
Configure an ACL from a TFTP Server
Enable ACL Logging
Layer 3 IP filtering with ACLs on the Series 5300XL switches can help improve
network performance and restrict network use by creating policies for:
■ Switch Management Access: Permits or denies in-band manage­
ment access. This includes preventing the use of certain TCP or UDP
applications (such as Telnet, SSH, web browser, and SNMP) for
transactions between specific source and destination IP addresses.)
Application Access Security: Eliminates unwanted IP, TCP, or UDP
■
traffic in a path by filtering packets where they enter or leave the
switch on specific VLAN interfaces.
ACLs on the 5300xl switches can filter traffic to or from a host, a group of
hosts, or entire subnets.
This chapter describes how to configure, apply, and edit ACLs in a network
populated with HP Series 5300XL switches (with IP routing support enabled)
and how to monitor the results of ACL actions.
ACLs can enhance network security by blocking selected IP traffic, and can
serve as part of your network security program. However, because ACLs do
not provide user or device authentication, or protection from malicious
manipulation of data carried in IP packet transmissions, they should not
be relied upon for a complete security solution.
Series 5300XL ACLs do not screen non-IP traffic such as AppleTalk and IPX.
Access Control Lists (ACLs) for the Series 5300xl Switches
Default Menu
None —
None —
—
—
n/a —
n/a —
n/a —
n/a —

Introduction

CLI Web
9-33 —
9-38 —
9-44 —
9-46 —
9-48 —
9-47 —
9-56 —
9-60 —
9-3