HP 2530 User Manual

Places the CLI in the IPv6 ACL (ipv6-acl) context specified by the <ascii-str>
alphanumeric identifier to enter individual ACEs in the specified ACL. If the ACL
does not already exist, this command creates it.
<ascii-str> Specifies an alphanumeric identifier for the ACL, an
alphanumeric string of up to 64 case-sensitive characters. (To
include spaces in the string, enclose the string in single or double
quotes, such as "Accounting ACL".) You can also use this
command to access an existing ACL. See “Editing rules”
(page 86)
.
Example 28 Entering the ACL context
HP Switch(config)# ip access-list Sample-List
HP Switch(config-ipv6-acl)#
Configuring ACEs in an ACL
Configure ACEs after using the ipv6 access-list <ascii-str> command to specify the
IPv6 ACL (ipv6_acl) context.
Syntax: (ipv6 acl context)
< deny | permit > <ipv6> [ < any | host <SA> | SA/prefix-length > | <
any | host <DA> | DA/prefix-length > | [log] >]
Appends an ACE to the end of the list of ACEs in the current ACL. In the default configuration,
ACEs are automatically assigned consecutive sequence numbers in increments of 10 and can be
renumbered using resequence, page 90).
NOTE: To insert a new ACE between two existing ACEs in an ACL, precede deny or permit
with an appropriate sequence number. See “Inserting an ACE in an existing ACL with a sequence
number” (page 88).
For a match to occur, a packet must have:
• the source and destination IPv6 addressing criteria specified in the ACE
• the protocol-specific criteria configured in the ACE, including any optional elements
• any (optional) DSCP settings configured in the ACE
SubtaskTaskParameter
In the IPv6 (ipv6-acl) context, specify
whether the ACE denies or permits a
packet matching the criteria in the ACE.
< deny | permit >
This second instance of addressing in an
IPv6 ACE follow the first (SA) instance and
< any | host < DA
|DA/prefix-length >
defines the destination IPv6 address (DA)
that a packet must carry to match with the
ACE.
Allows IPv6 packets to any IPv6 DA.any
Specifies only packets having DA as the
destination address. Use this criterion when
host < DA >
you want to match only the IPv6 packets for a
single DA.
Specifies packets intended for one or more
contiguous subnets or contiguous addresses
DA / prefix-length
82 Updates for the HP Switch Software IPv6 Configuration Guide

HP 2530 Specifications

General

Brand	HP
Model	2530
Category	Switch
Language	English