- Posts: 27
- Thank you received: 0
Reg:Access list
19 years 1 month ago #10477
by Benny
Reg:Access list was created by Benny
How we can delete only one access list from a group?
What I actually mean is that it is possible for me to add the access list continuously (For ex: 200 ACL’s).But when i try to remove it all the 200 ACL’s is getting removed. Does anybody know how to remove only one ACL from a group?
What I actually mean is that it is possible for me to add the access list continuously (For ex: 200 ACL’s).But when i try to remove it all the 200 ACL’s is getting removed. Does anybody know how to remove only one ACL from a group?
19 years 1 month ago #10869
by RedRanger
RedRanger
"I'd Rather You Hate Me For Everything I Am Than Love Me For Something I'm Not."
Be Awesome
Replied by RedRanger on topic Re: Reg:Access list
OK, lets say you have the following ACLs going on:
access-list 1 deny 192.168.1.2 0.0.0.255 eq 23
access-list 1 permit ip any any
access-list 200 deny 178.1.0.0 0.0.255.255 eq http
access-list 200 permit ip any any
and you want to remove one strand from an ACL? OK...watch closely:
router(config)#no access-list 1 deny 192.168.1.2 0.0.0.255 eq 23
or say that you want to remove an ACL on an Autonomous System number:
router(config)#no access-list 1
I hope that answers your question...I'm actually glad that you asked it. I need some review on ACLs before I get into the CCNA 4.
access-list 1 deny 192.168.1.2 0.0.0.255 eq 23
access-list 1 permit ip any any
access-list 200 deny 178.1.0.0 0.0.255.255 eq http
access-list 200 permit ip any any
and you want to remove one strand from an ACL? OK...watch closely:
router(config)#no access-list 1 deny 192.168.1.2 0.0.0.255 eq 23
or say that you want to remove an ACL on an Autonomous System number:
router(config)#no access-list 1
I hope that answers your question...I'm actually glad that you asked it. I need some review on ACLs before I get into the CCNA 4.
RedRanger
"I'd Rather You Hate Me For Everything I Am Than Love Me For Something I'm Not."
Be Awesome
19 years 1 month ago #10878
by jwj
-Jeremy-
Replied by jwj on topic Re: Reg:Access list
If you are running a newer IOS version you can edit access-lists line by line. If you do (example) a show ip access-lists 10 it should output something like this:
10 permit 10.10.5.0 0.0.0.255
20 permit 192.168.50.0 0.0.0.255
30 deny any
So if you wanted to delete the second line, you'd go into config mode, and type:
router(config)#ip access-list standard 10
router(config-std-acl)#no 20 permit 192.168.50.0 0.0.0.255
You can add lines also. If your IOS is older, before 12.2(14) I believe, you'll have to copy your acl to a text document, edit out the line(s), delete the old access list on the router, and paste the new one in. It's a pain.
10 permit 10.10.5.0 0.0.0.255
20 permit 192.168.50.0 0.0.0.255
30 deny any
So if you wanted to delete the second line, you'd go into config mode, and type:
router(config)#ip access-list standard 10
router(config-std-acl)#no 20 permit 192.168.50.0 0.0.0.255
You can add lines also. If your IOS is older, before 12.2(14) I believe, you'll have to copy your acl to a text document, edit out the line(s), delete the old access list on the router, and paste the new one in. It's a pain.
-Jeremy-
Time to create page: 0.122 seconds