cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
338
Views
3
Helpful
2
Replies

Modifying multiple ACE's of ACL 's containing object groups

michaelm18x
Level 1
Level 1

How do you modify an ACE whose line numbers don't increment because they are a part of the same object-group expansion?

2 Replies 2

Patrick Iseli
Level 7
Level 7

You change the objetct group.

But take care if the same object group is usesd in multiple ACLs then this will add or delete in all the ACLs.

Reference:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800d641d.shtml

example:

(config)# object-group network host_grp_2

(config-network)# network-object host 172.16.10.1

(config-network)# network-object host 172.16.10.2

(config-network)# no network-object host 172.16.10.2

(config-network)# exit

sincerely

Patrick

Bu the way if you are doing < show access-list > you will see the expanded version of the access-list with the hitcounts.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card