HP 6200YL User Manual

Page 258

Advertising
background image

----------------------------------------------------------------------

IPv6 Access Control Lists (ACLs)
Displaying ACL Configuration Data

ProCurve(config)# show access-list List-120

Access Control Lists

Name: List-120

Type: Extended

Indicates whether the ACL
is applied to an interface.

Applied: No

SEQ Entry

Remark Field (Appears if remark configured.).

10 Action: permit

Remark: Telnet Allowed

Src IP: 10.30.133.27 Mask: 0.0.0.0 Port(s): eq 23

Dst IP: 0.0.0.0 Mask: 255.255.255.255

Empty field indicates that
the destination TCP port
can be any value.

Port(s):

Proto : TCP (Established)

TOS

: -

Precedence: routine

Source Address

TCP Source Port

DSCP Codepoint and Precedence Data

Protocol Data

20 Action: deny (log)

Src IP: 10.30.133.1 Mask: 0.0.0.255 Port(s):

Dst IP: 0.0.0.0 Mask: 255.255.255.255 Port(s):

Proto : IP

TOS

: -

Precedence: -

30 Action: permit

Src IP: 0.0.0.0 Mask: 255.255.255.255 Port(s):

Dst IP: 0.0.0.0 Mask: 255.255.255.255 Port(s):

Proto : IP

TOS

: -

Precedence: -

Figure 8-31. Example of Listing an IPv4 Extended ACL

The

show access-list < identifier > config command shows the same ACL data

as

show access-list < identifier > but in the format used by the

show < run | config > commands to list the switch configuration. For example:

Port-1(config)# show access-list List-120 config

ip access-list extended "List-120"

10 remark "Telnet Allowed"

10 permit tcp 10.30.133.27 0.0.0.0 eq 23 0.0.0.0 255.255.255.255 precedence 0

established

20 deny ip 10.30.133.1 0.0.0.255 0.0.0.0 255.255.255.255 log

30 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255

exit

Figure 8-32. Example of an ACL Listed with the “Config” Option

8-82

Advertising
This manual is related to the following products: