Command Line Interface Reference Guide

access-list

 

 

<anyhost <DA>DA/<prefix-length>> [comparison-operator <value>]

[established]

[ack][fin][rst][syn]

<icmp>

<anyhost <SA>SA/<prefix-length>> <anyhost <DA>DA/<prefix-length>> [0-255 [0-255]icmp-message]

[dscp <precedencecodepoint>] [log]

Insert an ACE or a remark by assigning a sequence number:

ProCurve(config)# ipv6 access-list <name-str>

ProCurve(config-ipv6-acl)# <seq-#> <denypermitremark>

Note: The deny and permit keywords use the options show above for "Create and IPv6 ACL".

Delete an ACE or a Remark (or both) by sequence number:

ProCurve(config)# ipv6 access-list <name-str>

ProCurve(config-ipv6-acl)# no <seq-#> [remark]

Note: You can also delete an ACE by entering no <permitdeny> followed by the settings explicitly configured for that ACE.

Resequence the ACEs in an ACL:

ProCurve(config)# ipv6 access-list resequence <name-str><starting-#> <increment>

Enter a Remark:

ProCurve(config)# ipv6 access-list <name-str>

ProCurve(config-ipv6-acl)# remark <remark-str>

Remove a Remark:

Immediately after entry:

ProCurve(config-ipv6-acl)# no remark

After entry of an ACE:

ProCurve(config-ipv6-acl)# no <seq-#> remark

Delete an IPv6 ACL:

ProCurve(config)# no ipv6 access-list <name-str> vlan

Enable or Disable an IPv6 VACL:

ProCurve(config)# [no] vlan <vid> ipv6 access-group <name-str> vlan

Enable or Disable a Static Port ACL:

ProCurve(config)# [no] interface <port-listtrkx> ipv6 access-group <name-str> in ProCurve(eth-<port-listtrkx>)# [no] ipv6 access-group <name-str> in

© 2009 Hewlett-Packard Development Company, L.P.

61