Table 17 Data types included in show access-list <acl-id> output (continued)
DescriptionField
Used for IPv6 ACEs and IPv4 extended ACEs: The source and destination IP addresses to
which the corresponding configured masks are applied to determine whether there is a match
with a packet.
Dst IP
Lists the content of the ACEs in the selected ACL.Entry
Used for IPv4 standard ACEs: The source IPv4 address to which the configured mask is
applied to determine whether there is a match with a packet.
IP
Used in IPv4 ACEs, the mask is configured in an ACE and applied to the corresponding IP
address in the ACE to determine whether a packet matches the filtering criteria.
Mask
The ACL identifier. For IPv6 ACLs, an alphanumeric name. For IPv4 ACLs, a number from 1
to 199 or an alphanumeric name.
Name
Used in IPv4 extended ACEs to show any TCP or UDP operator and port numbers included
in the ACE.
Port(s)
Used in IPv6 ACEs to specify the number of consecutive high-order (leftmost) bits of the source
and destination addresses configured in an ACE to be used to determine a match with a
packet being filtered by the ACE.
Prefix Len (source
and destination)
Used in IPv6 ACEs and IPv4 extended ACEs to specify the packet protocol type to filter.Proto
Displays any optional remark text configured for the selected ACE.Remark
The sequential number of the ACE in the specified ACL.SEQ
Used for IPv6 ACEs and IPv4 extended ACEs: The source IPv6 or IPv4 address to which the
configured mask is applied to determine whether there is a match with a packet.
Src IP
Used in IPv6 ACEs to show TCP or UDP source and destination operator and port numbers
included in the ACE.
Src Ports
Dst Ports
IPv6, Standard, or Extended. IPv6 ACLs use a source and a destination address, plus IPv6
protocol specifiers.
Type
• Standard ACLs are IPv4 only, and use only a source IP address.
• Extended ACLs are available in IPv4 only, and use both source and destination IP
addressing, as well as other IP protocol specifiers.
Display all ACLs and their assignments in the startup-config and running-config files
The show config and show running commands display configured ACLs and ACL assignments
to interfaces.
Creating or editing an ACL offline
“Editing an existing ACL” (page 86) describes how to use the CLI to edit an ACL and applies most
where the ACL is short or there is only a minor editing task to perform. The offline method is a
useful alternative to using the CLI for creating or extensively editing a large ACL. This section
describes how to:
• move an existing ACL to a TFTP server
• use a text(.txt) file format to create a new ACL or edit an existing ACL offline
• use TFTP to load an offline ACL into the switch’s running-config
For longer ACLs, you can use this offline method.
NOTE: Copy commands that use either tftp or xmodem use usb as a source or destination
device for file transfers. So while the following example highlights tftp, xmodem or usb can also
transfer ACLs to and from the switch.
102 Updates for the HP Switch Software IPv6 Configuration Guide