Overview For Ipv6 Acls - HP ProCurve 5400zl Reference Manual

Command Line Interface Reference Guide
o <ACL-IP-SPEC> - specify the source or destination IP addresses to
match.
* IP-ADDR MASK - match addresses defined by IP-ADDR using the bits
* IP-ADDR/MASK-LEN - the mask is one in which the high order MASK-LEN
* host IP-ADDR - match a specific host; implies a mask of all zeros.
* any
o log - log all matches.
o <ip|tcp|udp> - specify protocol on which to match packets.
o <ACL-PORT-SPEC> - for tcp or udp entries, specify the ports on which
to match.
1-65535, or by using protocol names for certain well-known ports.
The following port specifications may be used:
* eq <port>
* neq <port> - match all packets except those from (to) the specified
* lt <port>
* gt <port>
* range <port> <port> - match packets from (to) port numbers between
The following well-known ports may be referred to by name:
TCP: bgp, dns, ftp, http, imap4, ldap, nntp, pop2, pop3, smtp,
ssl, telnet
UDP: bootpc, bootps, dns, ntp, radius, radius-old, rip, snmp,
snmp-trap, tftp

OVERVIEW FOR IPV6 ACLS

Category:
Primary context:
Related Commands
Note: This information is preliminary; the final detailed command list is coming soon.
Usage for IPv6 ACL Commands
Create an IPv6 ACL or add an ACE to the end of an existing IPv6 ACL:
ProCurve(config)# ipv6 access-list <name-str>
ProCurve(config-ipv6-acl)# <deny|permit>
<ipv6|esp|ah|sctp|ipv6-protocol-nbr>
<tcp|upd>
© 2009 Hewlett-Packard Development Company, L.P.
The following formats may be used to specify IP addresses:
set to zero in MASK.
bits are zeros, and the remaining bits are ones.
172.16.0.0/18 translates to 172.16.0.0 0.0.63.255
- match any IP address.
Port numbers may be specified as integers in the range
- match packets from (to) the specified port.
port.
- match packets from (to) port numbers less than the
specified port.
- match packets from (to) port numbers greater than the
specified port.
the first and second ports, inclusive.
specified must be less than the second port specified.
config
<any|host <SA>|SA/<prefix-length>>
<any|host <DA>|DA/<prefix-length>>
<any|host <SA>|SA/<prefix-length>>
[comparison-operator <value>]
The first port
access-list
60