HP HP ProCurve Series 6600, Access Security Manual

Page: 511 / 778

10-91
IPv4 Access Control Lists (ACLs)
Editing an Existing ACL
Figure 10-28 illustrates the process for deleting an ACE from a list:
Figure 10-28. Example of Deleting an ACE from Any ACL
Resequencing the ACEs in an ACL
This action reconfigures the starting sequence number for ACEs in an ACL,
and resets the numeric interval between sequence numbers for ACEs config-
ured in the ACL.
1. To view the current sequence numbering in an ACE, use
show run
or
show
access-list < name-str | 1 - 99 | 100-199 >
.
2. Use the command syntax (above) to change the sequence numbering.
Syntax: ip access-list resequence < name-str | 1 - 99 | 100 - 199 >
< starting-seq-# > < interval >
Resets the sequence numbers for all ACEs in the ACL.
< starting-seq-# > :
Specifies the sequence number for the first
ACE in the list. (Default: 10; Range: 1 - 2147483647)
< interval > :
Specifies the interval between sequence numbers
for the ACEs in the list. (Default: 10; Range: 1 - 2147483647)
HP Switch
(config)# show run
. . .
ip access-list standard "My-List"
10 permit 10.10.10.25 0.0.0.0
15 deny 10.10.10.1 0.0.0.255
20 permit 10.20.10.117 0.0.0.0
30 deny 10.20.10.1 0.0.0.255
40 permit 0.0.0.0 255.255.255.255
exit
HP Switch
(config)# ip access-list standard My-List
HP Switch
(config-std-nacl)# no 20
HP Switch
(config-std-nacl)# show run
. . .
ip access-list standard "My-List"
10 permit 10.10.10.25 0.0.0.0
15 deny 10.10.10.1 0.0.0.255
30 deny 10.20.10.1 0.0.0.255
40 permit 0.0.0.0 255.255.255.255
exit
ACL Before Deleting an ACE
This command enters the
“Named-ACL” (nacl)
context for “My-List”.
This command deletes the
ACE at line 20.
The ACE at line 20 has been
removed.
ACL After Deleting the ACE at Line 20