
Access Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches
Editing ACLs and Creating an ACL Offline
2. After you copy the above .txt file to a TFTP server the switch can access,
you would then execute the following command to download the file to
the switch’s startup-config file:
Figure 10-30. Example of Using “copy tftp command-file” To Configure an ACL in the Switch
N o t e
If a transport error occurs, the switch does not execute the command and the
ACL is not configured.
3. Next, assign the new ACL to the intended interface which, in this example,
is for port 2.
HPswitch(config)# interface 2 access-group 160 in
4. Inspect the effect of the ACL on the switch’s per-port resources.
ACL 160 used six per-port rules and 5 ACL masks on port 2. This means that ACL 160 could be
replaced with a larger ACL that uses up to three more masks. The switch reserves eight masks
per-port for ACL and IGMP use. (When enabled in a VLAN, IGMP uses one mask per-port on all
ports on the switch.)
Figure 10-31. Inspection of Per-Port Resource Usage After Assigning an ACL
5. Inspect the new running configuration:
10-70
Summary of Contents for 6400cl
Page 2: ......
Page 84: ...Static Virtual LANs VLANs VLAN Restrictions This page is intentionally unused 2 54 ...
Page 104: ...GVRP GVRP Operating Notes This page intentionally unused 3 20 ...
Page 274: ...Switch Meshing Operating Notes for Switch Meshing This page is intentionally unused 7 28 ...
Page 662: ... This page is intentionally unused 20 Index ...
Page 663: ......