Product guide

62
Access Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches
Terminology
Displaying ACL Data ProCurve(config)# show access-list
10-
Action Command Page
ProCurve(config)# show access-list [ acl-name-string ]
ProCurve(config)# show access-list config
ProCurve(config)# show access-list ports < port-list >
ProCurve(config)# show access-list resources
ProCurve(config)# access-list resources help
ProCurve(config)# show config
ProCurve(config)# show running
Terminology
3400cl/6400cl Switches: An all-inclusive reference to the ProCurve 3400cl
and 6400cl switches.
Access Control Entry (ACE): An ACE is a policy consisting of criteria and
an action to take (permit or deny) on a packet if it meets the criteria. The
elements composing the criteria include:
• Source IP address and mask (standard and extended ACLs)
• Destination IP address and mask (extended ACLs only)
• TCP or UDP application port numbers (optional, extended ACLs only)
Access Control List (ACL): A list (or set) consisting of one or more
explicitly configured Access Control Entries (ACEs) and terminating with
an implicit “deny” default which drops any packets that do not have a
match with any explicit ACE in the named ACL. The two classes of ACLs
are “standard” and “extended”. See “Standard ACL” and “Extended ACL”.
ACE: See “Access Control Entry”.
ACL: See “Access Control List”.
ACL ID: A number or alphanumeric string used to identify an ACL. A standard
ACL ID can have either a number from 1 to 99 or an alphanumeric string.
An extended ACL ID can have either a number from 100 to 199 or an
alphanumeric string.
10-7