Copying An Ipv6 Basic Or Ipv6 Advanced Acl; Configuring Packet Filtering With Acls; Applying An Ipv4 Basic, Ipv4 Advanced, Or Ethernet Frame Header Acl For Packet Filtering - HP 5830 Series Configuration Manual

Step
1. Enter system view.
2. Copy an existing IPv4
basic, IPv4 advanced,
or Ethernet frame
header ACL to create a
new ACL.

Copying an IPv6 basic or IPv6 advanced ACL

Step
1. Enter system view.
2. Copy an existing IPv6 basic or
IPv6 advanced ACL to create
a new ACL.

Configuring packet filtering with ACLs

You can use an ACL to filter incoming or outgoing IPv4 or IPv6 packets.
ACLs on VLAN interfaces filter only packets forwarded at Layer 3.
When you configure packet filtering with ACLs on a port, you can use IPv4 ACLs, IPv6 ACLs, or Ethernet
frame header ACLs. In a direction of a port, you can use only one ACL of a type.
NOTE:
Bridge mode (Layer 2) Ethernet ports, route mode (Layer 3) Ethernet ports, and VLAN interfaces support
configuring packet filtering with ACLs. The term "interface" in this section collectively refers to these types
of ports. You can use the port link-mode command to set an Ethernet port to operate in bridge or route
Layer 2—LAN Switching Configuration Guide
mode (see
Applying an IPv4 basic, IPv4 advanced, or Ethernet frame
header ACL for packet filtering
Step
1. Enter system view.
2. Enter interface view.
3. Apply an IPv4 basic, IPv4
advanced, or Ethernet frame
header ACL to the interface to
filter packets.
Command
system-view
acl copy { source-acl-number | name source-acl-name } to { dest-acl-number |
name dest-acl-name }
Command
system-view
acl ipv6 copy { source-acl6-number | name source-acl6-name } to
{ dest-acl6-number | name dest-acl6-name }
Command
system-view
interface interface-type
interface-number
packet-filter { acl-number | name
acl-name } { inbound | outbound }
10
).
Remarks
N/A
N/A
By default, no ACL is applied to
any interface.
Make sure no one is applying an
ACL to the interface when you are
doing the operation.