HP PROCURVE 2910AL, Руководство по обеспечению безопасности доступа

Страница: 368 / 594

IPv4 Access Control Lists (ACLs)
Editing an Existing ACL
Resequencing the ACEs in an ACL
This action reconfigures the starting sequence number for ACEs in an ACL,
and resets the numeric interval between sequence numbers for ACEs config­
ured in the ACL.
Syntax: ip access-list resequence < name-str | 1 - 99 | 100 - 199 >
< starting-seq-# > < interval >
Resets the sequence numbers for all ACEs in the ACL.
< starting-seq-# > :
Specifies the sequence number for the first
ACE in the list. (Default: 10; Range: 1 - 2147483647)
< interval > :
Specifies the interval between sequence numbers
for the ACEs in the list. (Default: 10; Range: 1 - 2147483647)
1. To view the current sequence numbering in an ACE, use show run or show
access-list < name-str | 1 - 99 | 100-199 > .
2. Use the command syntax (above) to change the sequence numbering.
This example resequences the “My-List” ACL at the bottom of figure 9-21 so
that the list begins with line 100 and uses a sequence interval of 100.
ProCurve(config)# show run
. . .
ip access-list standard "My-List"
10 permit 10.10.10.25 0.0.0.0
15 deny 10.10.10.1 0.0.0.255
30 deny 10.20.10.1 0.0.0.255
40 permit 0.0.0.0 255.255.255.255
exit
. . .
ProCurve(config)# ip access-list resequence My-List 100 100
ProCurve(config)# show run
. . .
ip access-list standard "My-List"
100 permit 10.10.10.25 0.0.0.0
200 deny 10.10.10.1 0.0.0.255
300 deny 10.20.10.1 0.0.0.255
400 permit 0.0.0.0 255.255.255.255
exit
Figure 9-22. Example of Viewing and Resequencing an ACL
9-80