Display All Acls And Their Assignments In The Startup-Config And Running-Config Files; Creating Or Editing An Acl Offline - HP 2530 Manual Supplement

Table of Contents

Advertisement

Table 17 Data types included in show access-list <acl-id> output (continued)
Field
Dst IP
Entry
IP
Mask
Name
Port(s)
Prefix Len (source
and destination)
Proto
Remark
SEQ
Src IP
Src Ports
Dst Ports
Type

Display all ACLs and their assignments in the startup-config and running-config files

The show config and show running commands display configured ACLs and ACL assignments
to interfaces.

Creating or editing an ACL offline

"Editing an existing ACL" (page 86)
where the ACL is short or there is only a minor editing task to perform. The offline method is a
useful alternative to using the CLI for creating or extensively editing a large ACL. This section
describes how to:
move an existing ACL to a TFTP server
use a text(.txt) file format to create a new ACL or edit an existing ACL offline
use TFTP to load an offline ACL into the switch's running-config
For longer ACLs, you can use this offline method.
NOTE:
Copy commands that use either tftp or xmodem use usb as a source or destination
device for file transfers. So while the following example highlights tftp, xmodem or usb can also
transfer ACLs to and from the switch.
102 Updates for the HP Switch Software IPv6 Configuration Guide
Description
Used for IPv6 ACEs and IPv4 extended ACEs: The source and destination IP addresses to
which the corresponding configured masks are applied to determine whether there is a match
with a packet.
Lists the content of the ACEs in the selected ACL.
Used for IPv4 standard ACEs: The source IPv4 address to which the configured mask is
applied to determine whether there is a match with a packet.
Used in IPv4 ACEs, the mask is configured in an ACE and applied to the corresponding IP
address in the ACE to determine whether a packet matches the filtering criteria.
The ACL identifier. For IPv6 ACLs, an alphanumeric name. For IPv4 ACLs, a number from 1
to 199 or an alphanumeric name.
Used in IPv4 extended ACEs to show any TCP or UDP operator and port numbers included
in the ACE.
Used in IPv6 ACEs to specify the number of consecutive high-order (leftmost) bits of the source
and destination addresses configured in an ACE to be used to determine a match with a
packet being filtered by the ACE.
Used in IPv6 ACEs and IPv4 extended ACEs to specify the packet protocol type to filter.
Displays any optional remark text configured for the selected ACE.
The sequential number of the ACE in the specified ACL.
Used for IPv6 ACEs and IPv4 extended ACEs: The source IPv6 or IPv4 address to which the
configured mask is applied to determine whether there is a match with a packet.
Used in IPv6 ACEs to show TCP or UDP source and destination operator and port numbers
included in the ACE.
IPv6, Standard, or Extended. IPv6 ACLs use a source and a destination address, plus IPv6
protocol specifiers.
Standard ACLs are IPv4 only, and use only a source IP address.
Extended ACLs are available in IPv4 only, and use both source and destination IP
addressing, as well as other IP protocol specifiers.
describes how to use the CLI to edit an ACL and applies most

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents