Working Offline To Create Or Edit An Acl - ProCurve 2610 Manual

Figure 9-25. Example of Deleting an ACE from an Extended ACL
Note
ACL 103 Before Removing
the Second "deny" ACE.

Working Offline To Create or Edit an ACL

When creating an ACL offline, ensure that there are sufficient rules available
for the ACEs you plan to apply to the ACL. If you attempt to apply an ACL to
multiple interfaces and the switch does not have sufficient resources to
support the ACL, the command will fail for all specified interfaces. For more
on ACL resources, refer to "Planning an ACL Application" on page 9-16.
For longer ACLs that would be difficult or time-consuming to accurately
create or edit in the CLI, you can use the offline method:
1. Begin by doing one of the following:
• To edit one or more existing ACLs, use copy command-output tftp to
copy the current version of the ACL configuration to a file in your
TFTP server. For example, to copy the ACL configuration to a file
named acl02.txt in the TFTP directory on a server at 10.28.227.2:
ProCurve# copy command-output 'show access-list
config' tftp 10.28.227.2 acl02.txt pc
Access Control Lists (ACLs)
Editing ACLs and Creating an ACL Offline
Use no access-list
to remove this line
from ACL 103.
ACL 103 After Removing
the Second "deny" ACE.
9-63