HP ProCurve 2910al Access Security Manual page 296

IPv4 Access Control Lists (ACLs)
Overview of Options for Applying IPv4 ACLs on the Switch
Table 9-2. Command Summary for IPv4 Extended ACLs
Action Command(s)
Create an Extended,
Named ACL
or
Add an ACE to the End
of an Existing,
Extended ACL
Create an Extended,
Numbered ACL
or
Add an ACE to the End
of an Existing,
Numbered ACL
Insert an ACE by
Assigning a Sequence
Number
Delete an ACE by
Specifying Its
Sequence Number
Resequence the ACEs
in an ACL
1
The mask can be in either dotted-decimal notation (such as 0.0.15.255) or CIDR notation (such as /20).
2
The [ log ] function applies only to "deny" ACLs, and generates a message only when there is a "deny" match.
9-8
ProCurve(config)# ip access-list extended < name-str | 100-199 >
ProCurve(config-std-nacl)# < deny | permit >
< ip | ip-protocol | ip-protocol-nbr >
< any | host <SA > | SA/< mask-length > | SA < mask >>
< any | host < DA > | DA/< mask-length > | DA < mask >>
< tcp | udp >
< any | host <SA > | SA/< mask-length > | SA < mask >>
< any | host <DA > | DA/< mask-length > | DA < mask >>
[established]
< igmp >
< any | host <SA > | SA/< mask-length > | SA < mask >>
< any | host < DA > | DA/< mask-length > | DA < mask >>
[ igmp-packet-type ]
< icmp >
< any | host <SA > | SA/< mask-length > | SA < mask >>
< any | host < DA > | DA/< mask-length > | DA < mask >>
[ [< 0 - 255 > [ 0 - 255 ] ] | icmp-message ]
[precedence < priority >]
[tos < tos- setting >]
2
[log]
ProCurve(config)# access-list < 100-199 > < deny | permit >
< ip-options |tcp/udp-options |igmp-options |icmp-options >
[precedence < priority >]
[tos < tos- setting >]
2
[log]
Note:
Uses the same IP, TCP/UDP, IGMP, and ICMP options as shown above for
"Create an Extended, Named ACL".
ProCurve(config)# ip access-list extended < name-str | 100-199 >
ProCurve(config-ext-nacl)# 1-2147483647 < deny | permit >
Uses the options shown above for "Create an Extended, Named ACL".
ProCurve(config)# ip access-list extended < name-str | 100-199 >
ProCurve(config-std-nacl)# no < 1-2147483647 >
ProCurve(config)# ip access-list resequence < name-str | 100-199 >
< 1-2147483647 > < 1-2147483646 >
[comparison-operator < value >]
[comparison-operator < value >]
Page
9-55
1
1
1
1
1
1
1
1
9-65
9-77
9-79
9-80