HP 2530 User Manual

• You can delete an ACE with the ipv6 access-list <identifier> command to enter
the ACL's context, followed by the command no <seq-#> (see page 89).
• Deleting the last ACE from an ACL leaves the ACL as an "empty" ACL placeholder that cannot
perform any filtering tasks. (In any ACL, implicit deny does not apply unless the ACL
includes at least one explicit ACE. See “Deleting an IPv6 ACL” (page 86)".)
Sequence numbering in ACLs
The ACEs in any ACL are sequentially numbered by 10s. In the default state, the sequence number
of the first ACE in a list is 10 and subsequent ACEs are numbered in increments of 10. The following
show run output shows an ACL named "My-list" using the default numbering scheme:
Example 30 Default sequential numbering for ACEs
ipv6 access-list "My-list"
10 permit ipv6 2001:db8:0:5ad::25/128 ::/0
20 permit ipv6 2001:db8:0:5ad::111/128 ::/0
30 permit icmp 2001:db8:0:5ad::115/128 ::/0 135
40 deny ipv6 2001:db8:0:5ad::/64 ::/0
exit
Append an ACE to the end of the ACL using ipv6 access-list at the global configuration
prompt or by entering the ACL context:
Example 31 Appending a new ACE to the end of an ACL
HP Switch(config)# ipv6 access-list My-list permit esp host
2001:db8:0:5ad::19 any
1
2
HP Switch(Config)# ipv6 access-list My-list
HP Switch(config-ipv6-acl)# permit ipv6 any host 2001:db8:0:5ad::1
1
From the global configuration prompt, appends an ACE to the
end of the ACL named My-list
2
Enters the context of the “My-list”ACL and appends an ACE to
the end of the list
To append a final ACE to the end of the ACL, see Example 31 (page 87).
Editing an existing ACL 87

HP 2530 Specifications

General

Layer	Layer 2
Operating Temperature	32°F to 113°F (0°C to 45°C)
Model	HP 2530
Power over Ethernet (PoE)	PoE+
Management	Web interface, CLI, SNMP
Memory	128 MB flash
Input Voltage	100-240 VAC
Jumbo Frame Support	Yes
Operating Humidity	15% to 95% non-condensing

Summary

1 Updates for the HP Switch Software Access Security Guide

Configuring advanced threat protection

Covers advanced threat protection features like DHCP snooping, Dynamic ARP protection, and Instrumentation monitor.

DHCP snooping

Details DHCP snooping for preventing DoS attacks by distinguishing trusted and untrusted ports.

Dynamic ARP protection

Explains how to protect networks from ARP poisoning attacks using dynamic ARP protection.

Dynamic IP Lockdown

This feature prevents IP source address spoofing by enforcing IP-to-MAC bindings.

Using the instrumentation monitor

How to use the instrumentation monitor to detect security anomalies and irregular operations.

Configuring RADIUS server support for switch services

Introduction

Explains configuring CoS, rate-limiting, and ACL client services via a RADIUS server.

Configuring and using dynamic (RADIUS-assigned) access control lists

Describes applying RADIUS-assigned ACLs to filter IP traffic from authenticated clients.

2 Updates for the HP Switch Software IPv6 Configuration Guide

Access Control Lists (ACLs)

Details configuring, applying, and editing static IPv6 ACLs for traffic filtering.

ACL applications

Covers filtering traffic from hosts, subnets, and applying ACLs at network edges.

RADIUS-assigned ACLs

Explains ACLs configured on a RADIUS server and assigned to authenticated clients.

Planning and configuring ACLs

Outlines steps for identifying ACL actions, designing ACLs, and applying them.

ACL operation

Describes how ACLs apply to ports, trunks, and filter traffic types.

Guidelines for planning ACL structure

Covers determining ACL application points and the order of ACEs for resource efficiency.

ACL configuration structure

Details the basic structure of an ACL, including identity, remarks, and ACEs.