HP E3800 Series, Access Security Manual

Page: 467 / 732

10-87
IPv4 Access Control Lists (ACLs)
Editing an Existing ACL
■ You can delete any ACE from any ACL (named or numbered) by using
the
ip access-list
command to enter the ACL’s context, and then using
the
no < seq-# >
command (page 10-90).
■
Deleting the last ACE from an ACL leaves the ACL in memory. In this
case, the ACL is “empty” and cannot perform any filtering tasks. (In
any ACL the Implicit Deny does not apply unless the ACL includes at
least one explicit ACE.)
Sequence Numbering in ACLs
The ACEs in any ACL are sequentially numbered. In the default state, the
sequence number of the first ACE in a list is “10” and subsequent ACEs are
numbered in increments of 10. For example, the following
show run
output
lists three ACEs with default numbering in a list named “My-List”:
Figure 10-23. Example of the Default Sequential Numbering for ACEs
You can add an ACE to the end of a named or numbered ACL by using either
access-list
for numbered ACLs or
ip access-list
for named ACLs:
Figure 10-24. Examples of Adding an ACE to the end of Numbered or Named ACLs
ip access-list standard "My-List"
10 permit 10.10.10.25 0.0.0.0
20 permit 10.20.10.117 0.0.0.0
30 deny 10.20.10.1 0.0.0.255
exit
HP Switch(config)# access-list 2 permit any
HP Switch(Config)# ip access-list standard My-list
HP Switch(Config-ext-nacl)# permit ip any host 10.10.10.125
Appends an ACE to
the end of a standard,
numbered ACL.
Enters the context of an extended ACL
and appends an ACE to the end of the list.