HP VPN Firewall Appliances Access Control Command Reference

3
Related commands
display acl accelerate
acl copy
Use acl copy to create an IPv4 basic, IPv4 advanced, or Ethernet frame header ACL by copying an ACL
that already exists. The new ACL has the same properties and content as the source ACL, but not the
same ACL number and name.
Syntax
acl copy { source-acl-number | name source-acl-name } to { dest-acl-number | name dest-acl-name }
Views
System view
Default command level
2: System level
Parameters
source-acl-number: Specifies an existing source ACL by its number:
• 2000 to 2999 for IPv4 basic ACLs.
• 3000 to 3999 for IPv4 advanced ACLs.
• 4000 to 4999 for Ethernet frame header ACLs.
name source-acl-name: Specifies an existing source ACL by its name. The source-acl-name argument is
a case-insensitive string of 1 to 63 characters.
dest-acl-number: Assigns a unique number to the ACL you are creating. This number must be from the
same ACL category as the source ACL. Available value ranges include:
• 2000 to 2999 for IPv4 basic ACLs.
• 3000 to 3999 for IPv4 advanced ACLs.
• 4000 to 4999 for Ethernet frame header ACLs.
name dest-acl-name: Assigns a unique name to the ACL you are creating. The dest-acl-name is a
case-insensitive string of 1 to 63 characters. It must start with an English letter, and to avoid confusion, it
cannot be all. For this ACL, the system automatically picks the smallest number from all available
numbers in the same ACL category as the source ACL.
Usage guidelines
You can assign a name to an ACL only when you create it. After an ACL is created with a name, you
cannot rename it or remove its name.
Examples
# Create IPv4 basic ACL 2002 by copying IPv4 basic ACL 2001.
<Sysname> system-view
[Sysname] acl copy 2001 to 2002
acl ipv6
Use acl ipv6 to create an IPv6 basic or IPv6 advanced ACL, and enter its ACL view. If the ACL has been
created, you directly enter its view.