Configuring Extended Acls - HP ProCurve 2910al Access Security Manual

Table 9-7. Command Summary for Extended ACLs
Action Command(s)
Create an Extended,
Named ACL
or
Add an ACE to the End
of an Existing,
Extended ACL
Create an Extended,
Numbered ACL
or
Add an ACE to the End
of an Existing,
Numbered ACL
Insert an ACE by
Assigning a Sequence
Number
Use Sequence Num-
ber To Delete an ACE
Resequence the ACEs
in an ACL
1
The mask can be in either dotted-decimal notation (such as 0.0.15.255) or CIDR notation (such as /20).
2
The [ log ] function applies only to "deny" ACLs, and generates a message only when there is a "deny" match.

Configuring Extended ACLs

ProCurve(config)# ip access-list extended < name-str | 100-199 >
ProCurve(config-std-nacl)# < deny | permit >
< ip | ip-protocol | ip-protocol-nbr >
< any | host <SA > | SA/< mask-length > | SA < mask >>
< any | host < DA > | DA/< mask-length > | DA < mask >>
[ tcp | udp ]
[established]
< igmp >
< any | host <SA > | SA/< mask-length > | SA < mask >>
< any | host < DA > | DA/< mask-length > | DA < mask >>
[ igmp-packet-type ]
< icmp >
< any | host <SA > | SA/< mask-length > | SA < mask >>
< any | host < DA > | DA/< mask-length > | DA < mask >>
[ [< 0 - 255 > [ 0 - 255 ] ] | icmp-message ]
[precedence < priority >]
[tos < tos- setting >]
2
[log]
ProCurve(config)# access-list < 100-199 > < deny | permit >
< ip-options |tcp/udp-options |igmp-options |icmp-options >
2
[log]
[precedence < priority >]
[tos < tos- setting >]
Note:
Uses the same IP, TCP/UDP, IGMP, and ICMP options as shown above for
"Create an Extended, Named ACL".
ProCurve(config)# ip access-list extended < name-str | 100-199 >
ProCurve(config-ext-nacl)# 1-2147483647 < deny | permit >
Uses the options shown above for "Create an Extended, Named ACL".
ProCurve(config)# ip access-list extended < name-str | 100-199 >
ProCurve(config-std-nacl)# no < 1-2147483647 >
ProCurve(config)# ip access-list resequence < name-str | 100-199 >
< 1-2147483647 > < 1-2147483646 >
Table continues on the next page.
< any | host <SA > | SA/< mask-length > | SA < mask >>
[comparison-operator < value >] ]
< any | host <DA > | DA/< mask-length > | DA < mask >>
[comparison-operator < value >]
IPv4 Access Control Lists (ACLs)

Configuring Extended ACLs

1
1
1
1
1
1
1
1
Page
9-55
9-65
9-77
9-79
9-80
9-53