IPv4 Access Control Lists (ACLs)

Creating or Editing ACLs Offline

Note

Creating or Editing ACLs Offline

The section titled “Editing an Existing ACL” on page 9-75describes how to use the CLI to edit an ACL, and is most applicable in cases where the ACL is short or there is only a minor editing task to perform. The offline method provides a useful alternative to using the CLI for creating or extensively editing a large ACL.This section describes how to:

■move an existing ACL to a TFTP server

■use a text (.txt) file format to create a new ACL or edit an existing ACL offline

■use TFTP to load an offline ACL into the switch’s running-config

For longer ACLs that may be difficult or time-consuming to accurately create or edit in the CLI, you can use the offline method described in this section.

Copy commands that used either tftp or xmodem, also include an option to use usb as a source or destination device for file transfers. So although the following example highlights tftp, bear in mind that xmodem or usb can also be used to transfer ACLs to and from the switch.

Creating or Editing an ACL Offline

The Offline Process

1.Begin by doing one of the following:

•To edit one or more existing ACLs, use copy command-output tftp to copy the current version of the ACL configuration to a file in your TFTP server. For example, to copy the ACL configuration to a file named acl-02.txtin the TFTP directory on a server at 10.28.227.2:

ProCurve# copy command-output 'show access-list config' tftp 10.28.227.2 acl02.txt pc

•To create a new ACL, just open a text (.txt) file in the appropriate directory on a TFTP server accessible to the switch.

2.Use a text editor to create or edit the ACL(s) in the *.txt ASCII file format.

9-94