HP E3800 Series, Руководство по обеспечению безопасности доступа

Страница: 385 / 732

10-5
IPv4 Access Control Lists (ACLs)
Overview of Options for Applying IPv4 ACLs on the Switch
Command Summary for Standard IPv4 ACLs
Action Command(s) Page
Create a Standard,
Named ACL
or
Add an ACE to the End
of an Existing Stan-
dard,
Named ACL
HP Switch(config)# ip access-list standard < name-str >
HP Switch(config-std-nacl)# < deny | permit >
< any | host < SA > | SA /< mask-length > | SA < mask >>
1
[log]
2
10-52
Create a Standard,
Numbered ACL
or
Add an ACE to the End
of an Existing
Standard,
Numbered
ACL
HP Switch(config)# access-list < 1-99 > < deny | permit >
< any | host < SA > | SA /< mask-length > | SA < mask >>
[log]
2
10-55
Use a Sequence
Number To Insert an
ACE in a Standard ACL HP Switch(config)# ip access-list standard < name-str | 1-99 >
HP Switch(config-std-nacl)# 1-2147483647 < deny | permit >
< any | host < SA > | SA /< mask-length > | SA < mask >>
1
[log]
2
10-87
Use an ACE’s
Sequence Number To
Delete the ACE from a
Standard ACL HP Switch(config)# ip access-list standard < name-str | 1-99 >
HP Switch(config-std-nacl)# no < 1-2147483647 >
10-90
Resequence the ACEs
in a Standard ACL HP Switch(config)# ip access-list resequence < name-str | 1-99 > < 1-2147483647 >
< 1-2147483646 >
10-91
Enter or Remove a
Remark from a
Standard ACL HP Switch(config)# ip access-list standard < name-str | 1-99 >
HP Switch(config-ext-nacl)# [ remark < remark-str > | no < 1-2147483647 > remark ]
For numbered, standard ACLs only, the following remark commands can be
substituted for the above:
HP Switch(config)# access-list < 1 - 99 > remark < remark-str >
HP Switch(config)# [no] access-list < 1 - 99 > remark
10-92
10-95
Delete a Standard ACL HP Switch(config)# no ip access-list standard < name-str | 1-99 >
For numbered, standard ACLs, the following command can be substituted for the
above:
HP Switch(config)# access-list < 1 - 99 > remark < remark-str >
10-85
1
The mask can be in either dotted-decimal notation (such as 0.0.15.255) or CIDR notation (such as /20).
2
The [ log ] function applies only to “deny” ACLs, and generates a message only when there is a “deny” match.