HP 6125XLG R2306-HP 6125XLG Blade Switch ACL and QoS Command Reference - Page 6

ACL commands, acl

Page 6 highlights

ACL commands acl Use acl to create an ACL, and enter its view. If the ACL has been created, you directly enter its view. Use undo acl to delete the specified or all ACLs. Syntax acl [ ipv6 ] number acl-number [ name acl-name ] [ match-order { auto | config } ] undo acl [ ipv6 ] { all | name acl-name | number acl-number } Default No ACL exists. Views System view Predefined user roles network-admin Parameters number acl-number: Specifies the number of an ACL: • 2000 to 2999 for IPv4 basic ACLs if the ipv6 keyword is not specified and for IPv6 basic ACLs if the ipv6 keyword is specified. • 3000 to 3999 for IPv4 advanced ACLs s if the ipv6 keyword is not specified and for IPv6 advanced ACLs if the ipv6 keyword is specified. • 4000 to 4999 for Ethernet frame header ACLs. This entry is not displayed if the ipv6 keyword is specified. name acl-name: Assigns a name to the ACL for easy identification. The acl-name argument is a case-insensitive string of 1 to 63 characters. It must start with an English letter and to avoid confusion, it cannot be all. match-order: Sets the order in which ACL rules are compared against packets. • auto: Compares ACL rules in depth-first order. The depth-first order differs with ACL categories. For more information, see ACL and QoS Configuration Guide. • config: Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has higher priority. If no match order is specified, the config-order applies by default. all: Specifies all ACLs. • If the ipv6 keyword is not specified, all ACLs refer to all IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs. • If the ipv6 keyword is specified, all ACLs refer to all IPv6 basic and IPv6 advanced ACLs. Usage guidelines You can assign a name to an ACL only when you create it. After an ACL is created with a name, you cannot rename it or remove its name. 1

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114

1
ACL commands
acl
Use
acl
to create an ACL, and enter its view. If the ACL has been created, you directly enter its view.
Use
undo
acl
to delete the specified or all ACLs.
Syntax
acl
[
ipv6
]
number
acl-number
[
name
acl-name
] [
match-order
{
auto
|
config
} ]
undo
acl
[
ipv6
] {
all
|
name
acl-name
|
number
acl-number
}
Default
No ACL exists.
Views
System view
Predefined user roles
network-admin
Parameters
number
acl-number
: Specifies the number of an ACL:
2000 to 2999 for IPv4 basic ACLs if the
ipv6
keyword is not specified and for IPv6 basic ACLs if
the
ipv6
keyword is specified.
3000 to 3999 for IPv4 advanced ACLs s if the
ipv6
keyword is not specified and for IPv6 advanced
ACLs if the
ipv6
keyword is specified.
4000 to 4999 for Ethernet frame header ACLs. This entry is not displayed if the
ipv6
keyword is
specified.
name
acl-name
: Assigns a name to the ACL for easy identification. The
acl-name
argument is a
case-insensitive string of 1 to 63 characters. It must start with an English letter and to avoid confusion, it
cannot be
all
.
match-order
: Sets the order in which ACL rules are compared against packets.
auto
: Compares ACL rules in depth-first order. The depth-first order differs with ACL categories. For
more information, see
ACL and QoS Configuration Guide
.
config
: Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has higher
priority. If no match order is specified, the config-order applies by default.
all
: Specifies all ACLs.
If the
ipv6
keyword is not specified, all ACLs refer to all IPv4 basic, IPv4 advanced, and Ethernet
frame header ACLs.
If the
ipv6
keyword is specified, all ACLs refer to all IPv6 basic and IPv6 advanced ACLs.
Usage guidelines
You can assign a name to an ACL only when you create it. After an ACL is created with a name, you
cannot rename it or remove its name.