HP ProCurve W.14.03 nacl, show, show run, list-name, access-list, Figure 9-24.Example of Inserting a Remark, Inserting a Remark for an ACE that Already Exists in an ACL. If a

IPv4 Access Control Lists (ACLs)

Editing an Existing ACL

Inserting Remarks and Related ACEs Within an Existing List. To insert an ACE with a remark within an ACL by specifying a sequence number, insert the numbered remark first, then, using the same sequence number, insert the ACE. (This operation applies only to ACLs accessed using the “Named-ACL” (nacl) context.) For example:

ProCurve(config-std-nacl)# 15 remark "HOST 10.10.10.21" ProCurve(config-std-nacl)# 15 permit host 10.10.10.21 ProCurve(config-std-nacl)# show run

ip access-list standard "My-List" 10 permit 10.10.10.15 0.0.0.0

15 remark "HOST 10.10.10.21"

15 permit 10.10.10.21 0.0.0.0

20 deny 10.10.10.1 0.0.0.255

30 remark "HOST-10.20.10.34"

30 permit 10.20.10.34 0.0.0.0 exit

Inserting a remark/ACE pair with the same sequence number requires that the remark (with the desired sequence number) be inserted before the ACE with the same number.

Figure 9-24. Example of Inserting a RemarkInserting a Remark for an ACE that Already Exists in an ACL. If a

sequence number is already assigned to an ACE in a list, you cannot insert a remark by assigning it to the same number. (To configure a remark with the same number as a given ACE, the remark must be configured first.) To assign a remark to the same number as an existing ACE:

1.Delete the ACE.

2.Configure the remark with the number you want assigned to the pair.

3.Re-Enter the deleted ACE with the number used to enter the remark.

Removing a Remark from an Existing ACE. If you want to remove a remark, but want to retain the ACE, do the following:

1.Use the Named ACL context to enter the ACL.

2.Using show run or show access-list< list-name >, note the sequence number and content of the ACE having a remark you want to remove.

3.Delete the ACE.

4.Using the same sequence number, re-enter the ACE.

9-83