HP ProCurve 6600 Transferring ACL Command Files, A-36, where:, [oobm], filename, ■Creates a new ACL, Access Security Guide, Access Security Guide, ■Adds to an existing ACL

File Transfers

Transferring ACL Command Files

Transferring ACL Command Files

This section describes how to upload and execute a command file to the switch for configuring or replacing an Access Control List (ACL) in the switch configuration. Such files should contain only ACE (Access Control Entry) commands. For more on this general topic, including an example of an ACL command file created offline, refer to the section titled “Editing ACLs and Creating an ACL Offline” in the “Access Control Lists (ACLs)” chapter of the latest Access Security Guide for your switch.

TFTP: Uploading an ACL Command File from a TFTP ServerSyntax: copy tftp command-file < ip-addr> < filename.txt > < unix pc > [oobm]

where:

<ip-addr> = The IP address of a TFTP server available to the switch

<filename.txt > = A text file containing ACL commands and stored in the TFTP directory of the server identified by < ip-addr>

<unix pc > = The type of workstation used for serial, Telnet, or SSH access to the switch CLI

[oobm] = For switches that have a separate out-of­ band management port, specifies that the transfer will be through the out-of­ band management interface. (Default is transfer through the data interface.)

This command copies and executes the named text file from the specified TFTP server address and executes the ACL commands in the file. Depending on the ACL commands used, this action does one of the following in the running-config file:

■Creates a new ACL.

■Replaces an existing ACL. (Refer to “Creating an ACL Offline” in the “Access Control Lists (ACLs)” chapter in the latest Access Security Guide for your switch.)

■Adds to an existing ACL.

A-36