Figure 9-25. Example of Deleting an ACE from an Extended ACL
Working Offline To Create or Edit an ACL
Note When creating an ACL offline, ensure that there are sufficient rules available
for the ACEs you plan to apply to the ACL. If you attempt to apply an ACL to
multiple interfaces and the switch does not have sufficient resources to
support the ACL, the command will fail for all specified interfaces. For more
on ACL resources, refer to “Planning an ACL Application” on page 9-17.
For longer ACLs that would be difficult or time-consuming to accurately
create or edit in the CLI, you can use the offline method:
1. Begin by doing one of the following:
• To edit one or more existing ACLs, use copy command-output tftp to
copy the current version of the ACL configuration to a file in your
TFTP server. For example, to copy the ACL configuration to a file
named acl02.txt in the TFTP directory on a server at 10.28.227.2:
ProCurve# copy command-output 'show access-list
config' tftp 10.28.227.2 acl02.txt pc
9-64
To Next Page
Loading...
Need help?
General