Copying An Acl - HP A5120 EI Series Configuration Manual

Follow these steps to configure an Ethernet frame header ACL:
To do...
Enter system view
Create an Ethernet frame header
ACL and enter its view
Configure a description for the
Ethernet frame header ACL
Set the rule numbering step
Create or edit a rule
Configure or edit a rule
description
Enable counting ACL rule matches
performed in hardware

Copying an ACL

You can create an ACL by copying an existing ACL. The new ACL has the same properties and content as
the source ACL, but not the same ACL number and name.
To copy an IPv4 or IPv6 ACL successfully, make sure the following:
The destination ACL number is from the same category as the source ACL number.

The source IPv4 or IPv6 ACL already exists, but the destination IPv4 or IPv6 ACL does not.

Use the command...
system-view
acl number acl-number [ name acl-
name ] [ match-order { auto |
config } ]
description text
step step-value
rule [ rule-id ] { deny | permit } [
cos vlan-pri | counting | dest-mac
dest-addr dest-mask | { lsap lsap-
type lsap-type-mask | type
protocol-type protocol-type-mask }
| source-mac sour-addr source-
mask | time-range time-range-
name ] *
rule rule-id comment text
hardware-count enable
9
Remarks
––
Required
By default, no ACL exists.
Ethernet frame header ACLs are
numbered in the range 4000 to
4999.
You can use the acl name acl-
name command to enter the view
of a named Ethernet frame
header ACL.
Optional
By default, an Ethernet frame
header ACL has no ACL
description.
Optional
5 by default.
Required
,
By default an Ethernet frame
header ACL does not contain any
rule.
To create or edit multiple rules,
repeat this step.
The lsap keyword is not supported
if the ACL is to be referenced by
a QoS policy for traffic
classification.
Optional
By default, an Ethernet frame
header ACL rule has no rule
description.
Optional
Disabled by default.
When the ACL is referenced by a
QoS policy, this command does
not take effect.