HP PROCURVE 2910AL, Руководство по обеспечению безопасности доступа

Страница: 332 / 594

IPv4 Access Control Lists (ACLs)
Configuring Standard ACLs
Configuring Standard ACLs
Table 9-6. Command Summary for Standard ACLs
Action Command(s) Page
Create a Standard,
Named ACL
or
Add an ACE to the End
of an Existing Stan­
dard,
Named ACL
ProCurve(config)# ip access-list standard < name-str >
ProCurve(config-std-nacl)# < deny | permit >
< any | host < SA > | SA /< mask-length > | SA < mask >>
1
[log]
2
9-46
Create a Standard,
Numbered ACL
or
Add an ACE to the End
of an Existing
Standard,
Numbered
ACL
ProCurve(config)# access-list < 1-99 > < deny | permit >
< any | host < SA > | SA /< mask-length > | SA < mask >>
[log]
2
9-49
Use a Sequence
Number To Insert an
ACE in an ACL ProCurve(config)# ip access-list standard < name-str | 1-99 >
ProCurve(config-std-nacl)# 1-2147483647 < deny | permit >
< any | host < SA > | SA /< mask-length > | SA < mask >>
1
[log]
2
9-76
Use an ACE’s
Sequence Number To
Delete the ACE from
an ACL ProCurve(config)# ip access-list standard < name-str | 1-99 >
ProCurve(config-std-nacl)# no < 1-2147483647 >
9-79
Resequence the ACEs
in an ACL ProCurve(config)# ip access-list resequence < name-str | 1-99 > < 1-2147483647 >
< 1-2147483646 >
9-80
Enter or Remove a
Remark from an ACL ProCurve(config)# ip access-list standard < name-str | 1-99 >
ProCurve(config-ext-nacl)# [ remark < remark-str > | no < 1-2147483647 > remark ]
9-81
9-83
For numbered, standard ACLs only, the following remark commands can be
substituted for the above:
ProCurve(config)# access-list < 1 - 99 > remark < remark-str >
ProCurve(config)# [no] access-list < 1 - 99 > remark
Delete an ACL ProCurve(config)# no ip access-list standard < name-str | 1-99 > 9-74
For numbered, standard ACLs, the following command can be substituted for the
above:
ProCurve(config)# access-list < 1 - 99 > remark < remark-str >
1
The mask can be in either dotted-decimal notation (such as 0.0.15.255) or CIDR notation (such as /20).
2
The [ log ] function applies only to “deny” ACLs, and generates a message only when there is a “deny” match.
9-44