HP HP ProCurve Series 6600, Руководство по обеспечению безопасности доступа

Страница: 527 / 778

10-107
IPv4 Access Control Lists (ACLs)
Creating or Editing ACLs Offline
Creating or Editing ACLs Offline
The section titled “Editing an Existing ACL” on page 10-86 describes how to
use the CLI to edit an ACL, and is most applicable in cases where the ACL is
short or there is only a minor editing task to perform. The offline method
provides a useful alternative to using the CLI for creating or extensively editing
a large ACL.This section describes how to:
■ move an existing ACL to a TFTP server
■
use a text (.txt) file format to create a new ACL or edit an existing
ACL offline
■ use TFTP to load an offline ACL into the switch’s running-config
For longer ACLs that may be difficult or time-consuming to accurately create
or edit in the CLI, you can use the offline method described in this section.
N o t e
Beginning with software release K_12_XX or later,
copy
commands that used
either
tftp
or
xmodem
, also include an option to use
usb
as a source or
destination device for file transfers. So although the following example
highlights tftp, bear in mind that
xmodem
or
usb
can also be used to transfer
ACLs to and from the switch.
Creating or Editing an ACL Offline
The Offline Process
1. Begin by doing one of the following:
• To edit one or more existing ACLs, use
copy command-output tftp
to
copy the current version of the ACL configuration to a file in your
TFTP server. For example, to copy the ACL configuration to a file
named
acl-02.txt
in the TFTP directory on a server at 10.28.227.2:
HP Switch# copy command-output 'show access-list
config' tftp 10.28.227.2 acl02.txt pc
• To create a new ACL, just open a text (.txt) file in the appropriate
directory on a TFTP server accessible to the switch.
2. Use a text editor to create or edit the ACL(s) in the *.txt ASCII file format.