HP E4510-48G, Справочник по командам

Страница: 825 / 1334

14-6
Description
Use the acl command to enter IPv4 ACL view. If the ACL does not exist, it is created first.
Use the undo acl command to remove a specified IPv4 ACL or all IPv4 ACLs.
By default, the match order is config .
Note that:
z
You can specify a name for an IPv4 ACL only when you create the ACL. After creating an ACL,
you cannot specify a name for it, nor can you change or remove its name.
z
The name of an IPv4 ACL must be unique among IPv4 ACLs. However, an IPv4 ACL and an IPv6
ACL can share the same name.
z
If you specify both an ACL number and an ACL name in one command to enter the view of an
existing ACL, be sure that the ACL number and ACL name identify the same ACL.
z
You can also use this command to modify the match order of an existing ACL but only when the
ACL does not contain any rules.
Examples
# Create IPv4 ACL 2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000]
# Create IPv4 ACL 2002, naming it flow .
<Sysname> system-view
[Sysname] acl number 2002 name flow
[Sysname-acl-basic-2002-flow]
# Enter the view of an unnamed IPv4 ACL by specifying its number.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000]
# Enter the view of a named IPv4 ACL by specifying its number.
<Sysname> system-view
[Sysname] acl number 2002
[Sysname-acl-basic-2002-flow]
# Delete the IPv4 ACL numbered 2000.
<Sysname> system-view
[Sysname] undo acl number 2000
# Delete the IPv4 ACL named flow .
<Sysname> system-view
[Sysname] undo acl name flow
acl copy
Syntax
acl copy { source-acl-number | name source-acl-name } to { dest-acl-number | name dest-acl-name }