IPv6 Configuration Guide K/KA/KB.15.15

2. From within the context of an IPv6 ACL named "List-01", insert a new ACE between two
existing ACEs.
In this example, the first command creates a new ACL and enters the ACL context. The next
two ACEs entered become lines 10 and 20 in the list. The third ACE entered is inserted
between lines 10 and 20 by using the sequence command with a sequence number of 11.
Inserting an ACE into an existing sequence
HP Switch(config)# Port_1_5400(config)# ipv6 access-list List-01
1
HP Switch(config-ipv6-acl)# permit ipv6 host fe80::100 host fe80::200
2
HP Switch(config-ipv6-acl)# permit ipv6 host fe80::103 any
HP Switch(config-ipv6-acl)# 11 permit ipv6 host fe80::110 host fe80::
3
HP Switch(config-ipv6-acl)# show run
Running configuration:
. . .
ipv6 access-list "List-01"
10 permit ipv6 fe80::100/128 fe80::200/128
11 permit ipv6 fe80::110/128 fe80::210/128
20 permit ipv6 fe80::103/128 ::/0
4
exit
1
Becomes Line 10
2
Becomes Line 20
3
4
Lines 10 and 20 were automatically numbered according to their order of entry in
the list.
Line 11 was explicitly numbered by the 11 permit command and was inserted in its
proper place in the list.
Deleting an ACE from an existing ACL
Syntax:
no 1 - 2147483647
no [ permit | deny ] ipv6-ACE-criteria
Both command options require entering the configuration context of the ACL
containing the ACE you want to delete.
The first command option deletes the ACE assigned to the specified sequence
number. The second command option deletes the ACE having the syntax specified
by ipv6-ACE-criteria.
1 - 2147483647
The range of valid sequence numbers for an ACL.
ipv6-ACE-criteria
The traffic selection options included in the ACE. To use this method to delete
an ACE, the criteria specified in the command must match the criteria specified
in the actual ACE you want to delete.
1. To find the sequence number of the ACE you want to delete, use show access-list
identifier or show access-list config to view the ACL.
2. Use ipv6 access-list identifier config to enter the IPv6 ACL (config-ipv6-acl)
context of the specified ACE.
3. In the IPv6 ACL (config-ipv6-acl) context, type no and enter the sequence number of the ACE
you want to delete.
Example 72 (page 128) illustrates the process for deleting an ACE from a list:
Deleting an ACE from an existing ACL 127