HP StorageWorks 8/80 Brocade Converged Enhanced Ethernet Administrator's Guide - Page 116

Removing a MAC ACL, Reordering the sequence numbers in a MAC ACL, command assigns a sequence number

Get HP StorageWorks 8/80 - SAN Switch PDF manuals and user guides View all HP StorageWorks 8/80 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 116 highlights

8 ACL configuration and management Use a sequence number to specify the rule you wish to modify. Without a sequence number, a new rule is added to the end of the list, and the existing rule is unchanged. NOTE Using the permit and deny keywords, you can create many different rules. The examples in this section provide the basic knowledge needed to modify MAC ACLs. NOTE This example assumes that test_02 contains an existing rule number 100 with the "deny any any" options. To modify a MAC ACL, perform the following steps from Privileged EXEC mode. 1. Enter the configure terminal command to enter global configuration mode. 2. Enter the mac command to specify the ACL called test_02 for modification. switch(config)#mac access-list extended test_02 3. Enter the no seq command to delete the existing rule 100. switch (config)#no seq 100 4. Enter the seq command to re create rule number 100 by recreating it with new parameters. switch(conf-macl-ext)#seq 100 permit any any Removing a MAC ACL To remove a MAC ACL, perform the following steps from Privileged EXEC mode. 1. Enter the configure terminal command to enter global configuration mode. 2. Enter the mac command to specify and delete the ACL that you want to remove. In this example, the extended MAC ACL name is "test_02." Example of deleting the extended MAC ACL named "test_02." switch(config)#no mac access-list extended test_02 Reordering the sequence numbers in a MAC ACL You can reorder the sequence numbers assigned to rules in a MAC ACL. Reordering the sequence numbers is useful when you need to insert rules into an ACL and there are not enough available sequence numbers. The first rule receives the number specified by the starting-sequence number that you specify. Each subsequent rule receives a number larger than the preceding rule. The difference in numbers is determined by the increment number that you specify. The starting-sequence number and the increment number must be in the range of 1 through 65535. For example, in the task listed below the resequence command assigns a sequence number of 50 to the rule named test_02, then the second rule has a sequence number of 55 and the third rule a has a sequence number of 60. 96 Converged Enhanced Ethernet Administrator's Guide 53-1001346-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
96
Converged Enhanced Ethernet Administrator’s Guide
53-1001346-01
ACL configuration and management
8
Use a sequence number to specify the rule you wish to modify. Without a sequence number, a new
rule is added to the end of the list, and the existing rule is unchanged.
NOTE
Using the
permit
and
deny
keywords, you can create many different rules. The examples in this
section provide the basic knowledge needed to modify MAC ACLs.
NOTE
This example assumes that test_02 contains an existing rule number 100 with the “deny any any
”
options.
To modify a MAC ACL, perform the following steps from Privileged EXEC mode.
1.
Enter the
configure terminal
command to enter global configuration mode.
2.
Enter the
mac
command to specify the ACL called test_02 for modification.
switch(config)#
mac access-list extended test_02
3.
Enter the
no seq
command to delete the existing rule 100.
switch (config)#
no seq 100
4.
Enter the
seq
command to re create rule number 100 by recreating it with new parameters.
switch(conf-macl-ext)#
seq 100 permit any any
Removing a MAC ACL
To remove a MAC ACL, perform the following steps from Privileged EXEC mode.
1.
Enter the
configure terminal
command to enter global configuration mode.
2.
Enter the
mac
command to specify and delete the ACL that you want to remove. In this
example, the extended MAC ACL name is “test_02.”
Example of deleting the extended MAC ACL named “test_02.”
switch(config)#
no mac access-list extended test_02
Reordering the sequence numbers in a MAC ACL
You can reorder the sequence numbers assigned to rules in a MAC ACL. Reordering the sequence
numbers is useful when you need to insert rules into an ACL and there are not enough available
sequence numbers.
The first rule receives the number specified by the starting-sequence number that you specify.
Each subsequent rule receives a number larger than the preceding rule. The difference in numbers
is determined by the increment number that you specify. The starting-sequence number and the
increment number must be in the range of 1 through 65535.
For example, in the task listed below the
resequence
command assigns a sequence number of
50 to the rule named test_02, then the second rule has a sequence number of 55 and the
third rule a has a sequence number of 60.