Need help with ProCurve 5308XL ACL

Archived from groups: comp.sys.hp.hardware (More info?)

Hi,

we´ve got a ProCurve5308xl switch in our network and we are not really
experienced in configuring VLANs and ACLs. Unfortunally this switch is
already working in productive environment so that we can´t play with its
configuration too much.
Now we´ve got a lack of understanding in association with the configuration
of the ACLs in our 2 VLANs.

We´ve just configured 2 VLANs (VLAN1 and VLAN2). In this initial
configuration, wether hosts from VLAN1 nor from VLAN2 should get access to
hosts from the other VLAN at this time. But this is going to change in the
future, so that various clients should get access to some ressources of the
other VLAN. ip route is already enabled and every client with an valid
gateway entry has access to any other client which gateway entry is valid
to. Our internet gateway is connected to VLAN1.

Now a few questions:

From which point of view is the inbound/ outbound filter to be seen?
E.g. if i plan to supress traffic between VLAN1 and VLAN2 (VLAN1
192.168.10.0/24 and VLAN2 192.168.20.0/24) what filter is to be set?
Is it outbound on VLAN1 or inbound on VLAN2? (The manual has a very
controversial explanation for inbound/ outbound filters which is confusing
us.)

How should we understand that: Are the ACLs described first working or not
and why doesn´t the second one do?


The next question we´ve got is:
What do we have to do if we got to allow one client from VLAN1 the access to
a host at VLAN2. Isn´t it right that, when i add a filter rule, it´s
automatically put on the end of my ACL. So it won´t come to effect when the
first rule denys any traffic.

The last thing we need to know is:
The packets of which destination addresses become filtered if i create an
ACE like this: "deny ip 192.168.10.1 255.255.255.255 192.168.20.1 0.0.0.31"
Meets this ACE all hosts beginning from 1 to 31 or the hosts with IP 32+, or
how should i understand the functioning of the ACE mask entry.


Thank you in advance for any help offered

Oskar



[1] Refered to HP Manual Chapter 9 from URL:
ftp://ftp.hp.com/pub/networking/software/59906051.pdf