Editing access-list

Editing access-list

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Editing access-list Tom Linden 06-11-2008
Posted by Tom Linden on June 11, 2008, 5:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Sorry if this sounds trivial
but I have what appears to be an error in an access-list
and I couldn't see how to delete one line

access-list 101 deny ip 255.0.0.0 0.255.255.255 any
access-list 101 deny ip any 255.0.0.0 0.255.255.255

The second line is surely wrong and must have come about
from a cut and paste operation.
--
PL/I for OpenVMS
www.kednos.com

Network Magic Graduation 20% off animated banner
Posted by News Reader on June 11, 2008, 6:20 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Tom Linden wrote:
> Sorry if this sounds trivial
> but I have what appears to be an error in an access-list
> and I couldn't see how to delete one line
>
> access-list 101 deny ip 255.0.0.0 0.255.255.255 any
> access-list 101 deny ip any 255.0.0.0 0.255.255.255
>
> The second line is surely wrong and must have come about
> from a cut and paste operation.

sh access-list 101

Note the sequence numbers beside the ACEs (they probably start at 10,
and increment by 10's).

Lets assume you saw this:

10 deny ip 255.0.0.0 0.255.255.255 any
20 deny ip any 255.0.0.0 0.255.255.255

If you wanted to delete the ACE with sequence # 20:

hostname # config t
hostname(config) # ip access-list extended 101
hostname(config-ext-nacl) # no 20

... and if you wanted to resequence the ACEs:

hostname(config-ext-nacl) exit
hostname(config) # ip access-list resequence 101 10 10

This would resequence the ACEs in access-list 101, starting at 10, and
incrementing by 10.


sh access-list 101 would verify that the undesirable ACE was removed,
but note that another ACE will now have sequence # 20 due to the
resequencing performed.


Best Regards,
News Reader

Posted by Tom Linden on June 11, 2008, 6:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

Thanks, I will squirrel that away. I discovered that cut and paste works
fine
as long as you don't use Hyperterm. I used PuTTY connected to OpenVMS
running
DECWindows with router console connection through a Xyplex terminal server.


> Tom Linden wrote:
>> Sorry if this sounds trivial
>> but I have what appears to be an error in an access-list
>> and I couldn't see how to delete one line
>> access-list 101 deny ip 255.0.0.0 0.255.255.255 any
>> access-list 101 deny ip any 255.0.0.0 0.255.255.255
>> The second line is surely wrong and must have come about
>> from a cut and paste operation.
>
> sh access-list 101
>
> Note the sequence numbers beside the ACEs (they probably start at 10,
> and increment by 10's).
>
> Lets assume you saw this:
>
> 10 deny ip 255.0.0.0 0.255.255.255 any
> 20 deny ip any 255.0.0.0 0.255.255.255
>
> If you wanted to delete the ACE with sequence # 20:
>
> hostname # config t
> hostname(config) # ip access-list extended 101
> hostname(config-ext-nacl) # no 20
>
> ... and if you wanted to resequence the ACEs:
>
> hostname(config-ext-nacl) exit
> hostname(config) # ip access-list resequence 101 10 10
>
> This would resequence the ACEs in access-list 101, starting at 10, and
> incrementing by 10.
>
>
> sh access-list 101 would verify that the undesirable ACE was removed,
> but note that another ACE will now have sequence # 20 due to the
> resequencing performed.
>
>
> Best Regards,
> News Reader



--
PL/I for OpenVMS
www.kednos.com

Similar ThreadsPosted
AccessList Questions August 20, 2004, 12:14 pm
Newbie question re editing ACLs November 14, 2005, 7:18 am

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map