o
<ACL-IP-SPEC>
-
specify
the
source
or
destination
IP
addresses
to
match. The following formats may be used to specify IP addresses:
* IP-ADDR MASK - match addresses deîš¿ned by IP-ADDR using the bits
set to zero in MASK.
* IP-ADDR/MASK-LEN - the mask is one in which the high order MASK-LEN
bits are zeros, and the remaining bits are ones.
172.16.0.0/18 translates to 172.16.0.0 0.0.63.255
* host IP-ADDR - match a speciîš¿c host; implies a mask of all zeros.
* any - match any IP address.
o log - log all matches.
o <ip|tcp|udp> - specify protocol on which to match packets.
o
<ACL-PORT-SPEC>
-
for
tcp
or
udp
entries,
specify
the
ports
on
which
to match. Port numbers may be speciîš¿ed as integers in the range
1-65535, or by using protocol names for certain well-known ports.
The following port speciîš¿cations may be used:
*
eq
<port>
-
match
packets
from
(to)
the
speciîš¿ed
port.
*
neq
<port>
-
match
all
packets
except
those
from
(to)
the
speciîš¿ed
port.
*
lt
<port>
-
match
packets
from
(to)
port
numbers
less
than
the
speciîš¿ed port.
*
gt
<port>
-
match
packets
from
(to)
port
numbers
greater
than
the
speciîš¿ed port.
*
range
<port>
<port>
-
match
packets
from
(to)
port
numbers
between
the îš¿rst and second ports, inclusive. The îš¿rst port
speciîš¿ed must be less than the second port speciîš¿ed.
The following well-known ports may be referred to by name:
TCP: bgp, dns, ftp, http, imap4, ldap, nntp, pop2, pop3, smtp,
ssl, telnet
UDP: bootpc, bootps, dns, ntp, radius, radius-old, rip, snmp,
snmp-trap, tftp
OVERVIEW FOR IPV6 ACLS
Category:
configPrimary context:
Related Commands
Note: This information is preliminary; the îš¿nal detailed command list is coming soon.
Usage for IPv6 ACL Commands
Create an IPv6 ACL or add an ACE to the end of an existing IPv6 ACL:
ProCurve(conîš¿g)# ipv6 access-list <name-str>
ProCurve(conîš¿g-ipv6-acl)# <deny|permit>
<ipv6|esp|ah|sctp|ipv6-protocol-nbr>
<any|host
<SA>|SA/<preîš¿x-length>>
<any|host
<DA>|DA/<preîš¿x-length>>
<tcp|upd>
<any|host
<SA>|SA/<preîš¿x-length>>
[comparison-operator <value>]
60© 2009 Hewlett-Packard Development Company, L.P.
access-listCommand Line Interface Reference Guide
To Next Page
Loading...
Need help?
General