Release Notes

Parameter Description Range Default
tftp
Specifies the Trivial File Transfer Protocol. — —
bandwidth-contract <name>
Specify the name of a bandwidth contract defined
via the cp-bandwidth-contract command.
— —
Usage Guidelines
This command turns the session ACL from a blacklist to a whitelist. A rule must exist that explicitly permits the
session before it is forwarded to the controller and the last rule in the list denies everything else.
Example
The following command creates a whitelist ACL that allows on with the source address as 10.10.10.10 and the
source mask as 2.2.2.2. The protocol is FTP and the bandwidth contract name is mycontract.
(host) (config-fw-cp) #ipv4 permit 10.10.10.10 2.2.2.2 proto ftp bandwidth-contract name
mycontract
The following command creates a a whitelist ACL entry that denies traffic using protocol 2 on port 5000 from
being forwarded to the controller:
(host) (config-fw-cp) #deny proto 6 ports 5000 6000
Related Commands
Command Description Mode
show firewall-cp
Show Control Processor (CP) whitelist ACL info. Enable or Config modes
cp-bandwidth-contract
This command configures a bandwidth contract
traffic rate which can then be associated with a
whitelist session ACL.
Enable or Config modes
Command History
Modification
ArubaOS 3.4 Command introduced.
ArubaOS 6.2 The permit <ip-addr><ip-mask> parameter was added.
The deny <ip-addr> parameter was added.
The any parameter was added.
The host parameter was added.
The ftp, http, https, icmp, snmp, ssh, telnet and tftp parameters were
added.
ArubaOS 6.3 The ipv4 and ipv6 parameters were added.
Command Information
Platform License Command Mode
Available on all platforms Base operating system, except for
noted parameters
Config mode on master
controllers
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide firewall cp | 346