HP VPN Firewall Appliances Access Control Command Reference

27
Use undo rule remark to delete the specified or all rule range remarks.
Syntax
rule [ rule-id ] remark text
undo rule [ rule-id ] remark [ text ]
Default
No rule range remarks are configured.
Views
IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view
Default command level
2: System level
Parameters
rule-id: Specifies a rule number in the range of 0 to 65534. The specified rule can be one that has been
created or not. If you specify no rule ID when adding a remark, the system automatically picks the rule ID
that is the nearest higher multiple of the numbering step to the current highest rule ID. For example, if the
rule numbering step is 5 and the current highest rule ID is 28, the system picks rule 30.
text: Specifies a remark, a case-sensitive string of 1 to 63 characters.
Usage guidelines
A rule range remark always appears immediately above the specified rule. If the specified rule has not
been created yet, the position of the comment in the ACL is as follows:
• If the match order is config, the remark is inserted into the ACL in descending order of rule ID.
• If the match order is auto, the remark is placed at the end of the ACL. After you create the rule, the
remark appears above the rule.
To display rule range remarks in an ACL, use the display this or display current-configuration.
When you delete rule range remarks, follow these guidelines:
• If neither rule-id nor text is specified, all rule range remarks are removed.
• Use the undo rule remark text command to remove all remarks that are the same as the text
argument.
• Use the undo rule rule-id remark command to delete a specific rule range remark. If you also
specify the text argument, you must type in the remark the same as was specified to successfully
remove the remark.
When adding an end remark for a rule range, you can specify the end rule number plus 1 for the rule-id
argument so all rules in this range appears between the two remarks. You can also specify the end rule
number for the rule-id argument. In this method, the end rule appears below the end remark. Whichever
method you use, be consistent.
Examples
# Display the running configuration of IPv4 basic ACL 2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] display this
#
acl number 2000