HP 6125XLG R2306-HP 6125XLG Blade Switch ACL and QoS Configuration Guide - Page 17

ACL configuration example, Network requirements

Get HP 6125XLG PDF manuals and user guides View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals

Page 17 highlights

Task Command Display ACL configuration and match statistics. display acl [ ipv6 ] { acl-number | all | name acl-name } Display whether an ACL has been successfully applied to an interface for packet filtering). display packet-filter { interface [ interface-type interface-number ] [ inbound | outbound ] | { interface vlan-interface vlan-interface-number [ vlan-id ] } [ inbound | outbound ] [ slot slot-number ] } Display match statistics for packet filtering ACLs. display packet-filter statistics interface interface-type interface-number { inbound | outbound } [ [ ipv6 ] { acl-number | name acl-name } ] [ brief ] Display the accumulated statistics for packet filtering ACLs. display packet-filter statistics sum { inbound | outbound } [ ipv6 ] { acl-number | name acl-name } [ brief ] Display detailed ACL packet filtering information. display packet-filter verbose interface interface-type interface-number { inbound | outbound } [ [ ipv6 ] { acl-number | name acl-name } ] [ slot slot-number ] Display QoS and ACL resource usage. display qos-acl resource [ slot slot-number ] Clear ACL statistics. reset acl [ ipv6 ] counter { acl-number | all | name acl-name } Clear match statistics (including the accumulated statistics) for packet filtering ACLs. reset packet-filter statistics { global | interface [ interface-type interface-number ] | vlan [ vlan-id ] } { inbound | outbound } [ default | [ ipv6 ] { acl-number | name acl-name } ] ACL configuration example Network requirements A company interconnects its departments through Device A. Configure an ACL to: • Permit access from the President's office at any time to the financial database server. • Permit access from the Financial department to the database server only during working hours (from 8:00 to 18:00) on working days. • Deny access from any other department to the database server. 11

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
11
Task
Command
Display ACL configuration and match statistics.
display acl
[
ipv6
] {
acl-number
|
all
|
name
acl-name
}
Display whether an ACL has been successfully applied
to an interface for packet filtering).
display
packet-filter
{
interface
[
interface-type
interface-number
] [
inbound
|
outbound
] | {
interface
vlan-interface
vlan-interface-number
[
vlan-id
] }
[
inbound
|
outbound
] [
slot
slot-number
] }
Display match statistics for packet filtering ACLs.
display
packet-filter
statistics
interface
interface-type
interface-number
{
inbound
|
outbound
} [ [
ipv6
]
{
acl-number
|
name
acl-name
} ] [
brief
]
Display the accumulated statistics for packet filtering
ACLs.
display
packet-filter
statistics
sum
{
inbound
|
outbound
} [
ipv6
] {
acl-number
|
name
acl-name
}
[
brief
]
Display detailed ACL packet filtering information.
display
packet-filter
verbose
interface
interface-type
interface-number
{
inbound
|
outbound
} [ [
ipv6
]
{
acl-number
|
name
acl-name
} ] [
slot
slot-number
]
Display QoS and ACL resource usage.
display
qos-acl
resource
[
slot
slot-number
]
Clear ACL statistics.
reset
acl
[
ipv6
]
counter
{
acl-number
|
all
|
name
acl-name
}
Clear match statistics (including the accumulated
statistics) for packet filtering ACLs.
reset
packet-filter
statistics
{
global
|
interface
[
interface-type
interface-number
] |
vlan
[
vlan-id
] }
{
inbound
|
outbound
} [
default
| [
ipv6
] {
acl-number
|
name
acl-name
} ]
ACL configuration example
Network requirements
A company interconnects its departments through Device A. Configure an ACL to:
•
Permit access from the President's office at any time to the financial database server.
•
Permit access from the Financial department to the database server only during working hours (from
8:00 to 18:00) on working days.
•
Deny access from any other department to the database server.