Displaying And Maintaining Acls; Configuration Examples; Ipv4 Acl Configuration Example - HP A6600 Configuration Manual

Displaying and maintaining ACLs

To do...
Display the IPv4 ACL configuration and
match statistics (centralized device).
Display the IPv4 ACL configuration and
match statistics (distributed device).
Display information about the IPv4 ACL
acceleration feature.
Display the IPv6 ACL configuration and
match statistics (centralized device).
Display the IPv6 ACL configuration and
match statistics (distributed device).
Display the usage of ACL rules (distributed
device).
Display the configuration and status of one
or all time ranges.
Clear statistics for one or all IPv4 ACLs.
Clear statistics for one or all IPv6 basic and
advanced ACLs.

Configuration examples

IPv4 ACL configuration example

Network requirements
A company interconnects its departments through Router A. Configure an ACL to do the following:
Permit access from the president's office to the financial database server at any time.

Permit access from the financial department to the database server only during working hours (from

8:00 to 18:00) on working days.
Deny access from any other department to the database server.

Command...
display acl { acl-number | all | name
acl-name } [ | { begin | exclude |
include } regular-expression ]
display acl { acl-number | all | name
acl-name } [ slot slot-number ] [ |
{ begin | exclude | include }
regular-expression ]
display acl accelerate { acl-number |
all } [ | { begin | exclude | include }
regular-expression ]
display acl ipv6 { acl6-number | all |
name acl6-name } [ | { begin |
exclude | include } regular-
expression ]
display acl ipv6 { acl6-number | all |
name acl6-name } [ slot slot-number ]
[ | { begin | exclude | include }
regular-expression ]
display acl resource [ slot slot-
number ] [ | { begin | exclude |
include } regular-expression ]
display time-range { time-range-name
| all } [ | { begin | exclude | include }
regular-expression ]
reset acl counter { acl-number | all |
name acl-name }
reset acl ipv6 counter { acl6-number |
all | name acl6-name }
11
Remarks
Available in any view.
Available in any view.
Available in any view.
Available in any view.
Available in any view.
Available in any view.
Available in any view.
Available in user view.
Available in user view.