Configuring Aces In An Acl - HP 2530 Manual Supplement

Places the CLI in the IPv6 ACL (ipv6-acl) context specified by the <ascii-str>
alphanumeric identifier to enter individual ACEs in the specified ACL. If the ACL
does not already exist, this command creates it.
<ascii-str>
Example 28 Entering the ACL context
HP Switch(config)# ip access-list Sample-List
HP Switch(config-ipv6-acl)#

Configuring ACEs in an ACL

Configure ACEs after using the ipv6 access-list <ascii-str> command to specify the
IPv6 ACL (ipv6_acl) context.
Syntax: (ipv6 acl context)
< deny | permit > <ipv6> [ < any | host <SA> | SA/prefix-length > | <
any | host <DA> | DA/prefix-length > | [log] >]
Appends an ACE to the end of the list of ACEs in the current ACL. In the default configuration,
ACEs are automatically assigned consecutive sequence numbers in increments of 10 and can be
renumbered using resequence, page 90).
NOTE: To insert a new ACE between two existing ACEs in an ACL, precede deny or permit
with an appropriate sequence number. See
number" (page
For a match to occur, a packet must have:
the source and destination IPv6 addressing criteria specified in the ACE
the protocol-specific criteria configured in the ACE, including any optional elements
any (optional) DSCP settings configured in the ACE
Parameter
< deny | permit >
< any | host < DA
|DA/prefix-length >
82 Updates for the HP Switch Software IPv6 Configuration Guide
Specifies an alphanumeric identifier for the ACL, an
alphanumeric string of up to 64 case-sensitive characters. (To
include spaces in the string, enclose the string in single or double
quotes, such as "Accounting ACL".) You can also use this
command to access an existing ACL. See
(page 86)
.
88).
Task
In the IPv6 (ipv6-acl) context, specify
whether the ACE denies or permits a
packet matching the criteria in the ACE.
This second instance of addressing in an
IPv6 ACE follow the first (SA) instance and
defines the destination IPv6 address (DA)
that a packet must carry to match with the
ACE.
any
host < DA >
DA / prefix-length
"Inserting an ACE in an existing ACL with a sequence
Subtask
Allows IPv6 packets to any IPv6 DA.
Specifies only packets having DA as the
destination address. Use this criterion when
you want to match only the IPv6 packets for a
single DA.
Specifies packets intended for one or more
contiguous subnets or contiguous addresses
"Editing rules"