HP 6125XLG R2306-HP 6125XLG Blade Switch ACL and QoS Command Reference - Page 7

acl copy, Examples, Related commands, Syntax, Views, Predefined user roles, Parameters

Page 7 highlights

You can change the match order only for ACLs that do not contain any rules. Examples # Create IPv4 basic ACL 2000, and enter its view. system-view [Sysname] acl number 2000 [Sysname-acl-basic-2000] # Create IPv4 basic ACL 2001 with the name flow, and enter its view. system-view [Sysname] acl number 2001 name flow [Sysname-acl-basic-2001-flow] Related commands display acl acl copy Use acl copy to create an ACL by copying an ACL that already exists. Syntax acl [ ipv6 ] copy { source-acl-number | name source-acl-name } to { dest-acl-number | name dest-acl-name } Views System view Predefined user roles network-admin Parameters source-acl-number: Specifies an existing source ACL by its number: • 2000 to 2999 for IPv4 basic ACLs if the ipv6 keyword is not specified and for IPv6 basic ACLs if the ipv6 keyword is specified. • 3000 to 3999 for IPv4 advanced ACLs s if the ipv6 keyword is not specified and for IPv6 advanced ACLs if the ipv6 keyword is specified. • 4000 to 4999 for Ethernet frame header ACLs. This entry is not displayed if the ipv6 keyword is specified. name source-acl-name: Specifies an existing source ACL by its name. The source-acl-name argument is a case-insensitive string of 1 to 63 characters. For a basic ACL or advanced ACL, if you do not specify the ipv6 keyword, this option specifies the name of an IPv4 basic ACL or advanced ACL; if you specify the ipv6 keyword, this option specifies the name of an IPv6 basic ACL or advanced ACL. dest-acl-number: Assigns a unique number to the ACL you are creating. This number must be from the same ACL category as the source ACL. If no ACL number is specified, the system automatically picks the smallest number from all available numbers in the same ACL category as the source ACL. Available value ranges include: • 2000 to 2999 for IPv4 basic ACLs if the ipv6 keyword is not specified and for IPv6 basic ACLs if the ipv6 keyword is specified. • 3000 to 3999 for IPv4 advanced ACLs s if the ipv6 keyword is not specified and for IPv6 advanced ACLs if the ipv6 keyword is specified. 2

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114

2
You can change the match order only for ACLs that do not contain any rules.
Examples
# Create IPv4 basic ACL 2000, and enter its view.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000]
# Create IPv4 basic ACL 2001 with the name
flow
, and enter its view.
<Sysname> system-view
[Sysname] acl number 2001 name flow
[Sysname-acl-basic-2001-flow]
Related commands
display
acl
acl copy
Use
acl copy
to create an ACL by copying an ACL that already exists.
Syntax
acl
[
ipv6
]
copy
{
source-acl-number
|
name
source-acl-name
}
to
{
dest-acl-number
|
name
dest-acl-name
}
Views
System view
Predefined user roles
network-admin
Parameters
source-acl-number
: Specifies an existing source ACL by its number:
2000 to 2999 for IPv4 basic ACLs if the
ipv6
keyword is not specified and for IPv6 basic ACLs if
the
ipv6
keyword is specified.
3000 to 3999 for IPv4 advanced ACLs s if the
ipv6
keyword is not specified and for IPv6 advanced
ACLs if the
ipv6
keyword is specified.
4000 to 4999 for Ethernet frame header ACLs. This entry is not displayed if the
ipv6
keyword is
specified.
name
source-acl-name
: Specifies an existing source ACL by its name. The
source-acl-name
argument is
a case-insensitive string of 1 to 63 characters. For a basic ACL or advanced ACL, if you do not specify
the
ipv6
keyword, this option specifies the name of an IPv4 basic ACL or advanced ACL; if you specify
the
ipv6
keyword, this option specifies the name of an IPv6 basic ACL or advanced ACL.
dest-acl-number
: Assigns a unique number to the ACL you are creating. This number must be from the
same ACL category as the source ACL. If no ACL number is specified, the system automatically picks the
smallest number from all available numbers in the same ACL category as the source ACL. Available
value ranges include:
2000 to 2999 for IPv4 basic ACLs if the
ipv6
keyword is not specified and for IPv6 basic ACLs if
the
ipv6
keyword is specified.
3000 to 3999 for IPv4 advanced ACLs s if the
ipv6
keyword is not specified and for IPv6 advanced
ACLs if the
ipv6
keyword is specified.