HP VPN Firewall Appliances Access Control Command Reference

28
rule 0 permit source 14.1.1.0 0.0.0.255
rule 5 permit source 10.1.1.1 0 time-range work-time
rule 10 permit source 192.168.0.0 0.0.0.255
rule 15 permit source 1.1.1.1 0
rule 20 permit source 10.1.1.1 0
rule 25 permit counting
#
return
# Add a start comment "Rules for VIP_start" and an end comment "Rules for VIP_end" for the rule range
10 to 25.
[Sysname-acl-basic-2000] rule 10 remark Rules for VIP_start
[Sysname-acl-basic-2000] rule 26 remark Rules for VIP_end
# Verify the configuration.
[Sysname-acl-basic-2000] display this
#
acl number 2000
rule 0 permit source 14.1.1.0 0.0.0.255
rule 5 permit source 10.1.1.1 0 time-range work-time
rule 10 remark Rules for VIP_start
rule 10 permit source 192.168.0.0 0.0.0.255
rule 15 permit source 1.1.1.1 0
rule 20 permit source 10.1.1.1 0
rule 25 permit counting
rule 26 remark Rules for VIP_end
#
return
Related commands
• display this (System Management and Maintenance Command Reference)
• display current-configuration (System Management and Maintenance Command Reference)
step
Use step to set a rule numbering step for an ACL. The rule numbering step sets the increment by which the
system numbers rules automatically. For example, the default ACL rule numbering step is 5. If you do not
assign IDs to rules you are creating, they are numbered 0, 5, 10, 15, and so on. The wider the numbering
step, the more rules you can insert between two rules. Whenever the step changes, the rules are
renumbered, starting from 0. For example, if there are five rules numbered 5, 10, 13, 15, and 20,
changing the step from 5 to 2 causes the rules to be renumbered 0, 2, 4, 6, and 8.
Use undo step to restore the default.
Syntax
step step-value
undo step
Default
The rule numbering step is 5.