Features common to all acl applications, Features common to all acl applications -20 – HP 6200YL User Manual

Page 196

Advertising
background image

IPv6 Access Control Lists (ACLs)
Overview

N o t e s

Software release K.14.01 supports connection-rate ACLs for inbound IPv4
traffic, but not for IPv6 traffic.

Beginning with software release K.14.01, static ACL mirroring and static ACL
rate-limiting are deprecated in favor of classifier-based mirroring and rate-
limiting features that do not use ACLs. If ACL mirroring or ACL rate-limiting
are already configured in a switch running software version K.13.xx, then
downloading and booting from release K.14.01 or greater automatically mod­
ifies the deprecated configuration to conform to the classifier-based mirroring
and rate-limiting supported in release K.14.01 or greater. For more information
on this topic, refer to the chapter titled “Classifier-Based Software Configura­
tion” in the latest Advanced Traffic Management Guide for your switch.

For information on traffic mirroring refer to the appendix titled “Monitoring
and Analyzing Switch Operation” in the Management and Configuration
Guide

for your switch.

Features Common to All ACL Applications

Any ACL can have multiple entries (ACEs).

You can apply any one ACL to multiple interfaces.

All ACEs in an ACL configured on the switch are automatically
sequenced (numbered). For an existing ACL, entering an ACE without
specifying a sequence number automatically places the ACE at the
end of the list. Specifying a sequence number inserts the ACE into the
list at the specified sequential location.

Automatic sequence numbering begins with “10” and increases in
increments of 10. You can renumber the ACEs in an ACL and also
change the sequence increment between ACEs.

The CLI

remark command option allows you to enter a separate

comment for each ACE.

A source or destination IPv6 address and a prefix length, together, can
define a single host, a range of hosts, or all hosts.

Every ACL populated with one or more explicit ACEs automatically
includes an Implicit Deny as the last entry in the list. The switch
applies this action to packets that do not match other criteria in the
ACL.

8-20

Advertising
This manual is related to the following products: