KB.15.15

1 - 2147483647

The range of valid sequence numbers for an ACL.

ipv6-ACE-criteria

The various traffic selection options described earlier in this chapter.

NOTE: Entering an ACE that would result in an out-of-range sequence number is

not allowed. Use the resequence command to free up ACE numbering availability

in the ACL.

Example 71 Inserting a New ACE in an Existing ACL

From the global configuration context:

1. Insert a new ACE with a sequence number of 45 between the ACEs numbered 40 and 50 in

“Appending an ACE to an existing list” (page 156).

Inserting an ACE in an existing ACL

HP Switch(Config)# ipv6 access-list My-list

HP Switch(config-ipv6-acl)# 45 permit icmp host 2001:db8:0:5ad::33 ::/0

HP Switch(config-ipv6-acl)# show run

. . .

ipv6 access-list "My-list"

10 permit ipv6 2001:db8:0:5ad::25/128 ::/0

20 permit ipv6 2001:db8:0:5ad::111/128 ::/0

30 permit icmp 2001:db8:0:5ad::115/128 ::/0

40 permit icmp 2001:db8:0:5ad::/64 ::/0

45 permit icmp 2001:db8:0:5ad::33 ::/0

50 permit icmp 2001:db8:0:5ad::19/128 ::/0

60 permit ipv6 ::/0 2001:db8:0:5ad::1/128

70 deny ipv6 2001:db8:0:5ad::/64 ::/0

80 permit ipv6 ::/0 ::/0

exit

Inserts a new ACE

assigned to line 45

Enters the

Named-ACL context

for “My-list”

126 IPv6 Access Control Lists (ACLs)