10-21-2008 04:33 AM - edited 03-11-2019 07:00 AM
Hi,
Not sure why when I try to remove this line 8 of access-list it return with the access-list is not exist!!. But I show on running config and show access-list it does exist.
The access-list i mentioned is line 8.
[ access-list in running config ]
----------------------------------
access-list vFW6_Private extended permit icmp host 172.18.16.30 host 192.168.106.14
access-list vFW6_Private extended permit icmp host 172.18.16.31 host 192.168.106.14
access-list vFW6_Private extended permit icmp host 172.18.16.32 host 192.168.106.14
access-list vFW6_Private remark --> PERMIT IP NETWORK ICMP TRAFFIC
access-list vFW6_Private extended permit icmp any any
access-list vFW6_Private remark --> SMV POLLING FOR IPN ACCESS SWITCH
access-list vFW6_Private extended permit udp object-group ODMA-Support 172.18.22.0 255.255.255.128 range snmp snmptrap
access-list vFW6_Private extended deny ip 192.168.3.0 255.255.255.0 host 172.18.30.11
access-list vFW6_Private remark --> TEST
access-list vFW6_Private extended permit ip object-group TS_SERVERS_SHT object-group TS_SERVER
[ show access-list vFW6_Private ]
-----------------------------------
P1-PKH-DC-FWSM1/vFW6-MGMT# show access-list vFW6_Private
access-list vFW6_Private; 2876 elements
access-list vFW6_Private line 1 extended permit icmp host 172.18.16.30 host 192.168.106.14 (hitcnt=0) 0xb2b6da
access-list vFW6_Private line 2 extended permit icmp host 172.18.16.31 host 192.168.106.14 (hitcnt=0) 0x9f31da8c
access-list vFW6_Private line 3 extended permit icmp host 172.18.16.32 host 192.168.106.14 (hitcnt=0) 0x91e47fe3
access-list vFW6_Private line 4 remark --> PERMIT IP NETWORK ICMP TRAFFIC access-list vFW6_Private line 5 extended permit icmp any any (hitcnt=272) 0x41c767f9
access-list vFW6_Private line 6 remark --> SMV POLLING FOR IPN ACCESS SWITCH
access-list vFW6_Private line 7 extended permit udp object-group ODMA-Support 172.18.22.0 255.255.255.128 range snmp snmptrap 0x6422021d
access-list vFW6_Private line 7 extended permit udp host 172.18.9.16 172.18.22.0 255.255.255.128 range snmp snmptrap (hitcnt=64) 0x28349cde
access-list vFW6_Private line 8 extended deny ip 192.168.3.0 255.255.255.0 host 172.18.30.11 (hitcnt=71) 0xdac6f6d
access-list vFW6_Private line 9 remark --> TEST
access-list vFW6_Private line 10 extended permit ip object-group TS_SERVERS_SHT object-group TS_SERVER 0x88b6cfd2
access-list vFW6_Private line 10 extended permit ip host 172.18.9.74 host 192.168.106.13 (hitcnt=0) 0xcbb83b1e
access-list vFW6_Private line 10 extended permit ip host 172.18.9.74 host 192.168.106.12 (hitcnt=0) 0x88cf56d8
10-21-2008 04:35 AM
FWSM1/vFW6-MGMT(config)# no access-list vFW6_Private extended deny i$
Specified access-list does not exist
P1-PKH-DC-FWSM1/vFW6-MGMT(config)#
10-21-2008 05:29 AM
there seems to be an issue with your terminal width (check the $ sign in your second post), you need to type the whole line to remove it:
no access-list vFW6_Private line 8 extended deny ip 192.168.3.0 255.255.255.0 host 172.18.30.11
You can also set the width of the terminal AFAIR.
Regards
Farrukh
10-21-2008 06:04 AM
Hi,
This have nothing wrong with terminal length.
Regards
10-21-2008 07:26 AM
i can remove other line of access-list, just the line 8 I can't.
Regards
10-21-2008 10:28 PM
Well the only difference I see is the others are 'permit' ACEs and this is a deny :).
It might be a software bug. As a temporary workaround you maybe change it in notepad and then reapply it after clearing the ACL
clear configure access-list name..
then paste.
Regards
Farrukh
10-24-2008 12:31 AM
WebEX with TAC, really is weird problem.Resolve it by clear config access-list then apply back the access-list solve the problem.
10-24-2008 09:11 PM
Thanks for the update, glad you have it working now :). As I told ya, you have to remove the ACL and then paste a new one, if something as 'basic' as ACL is not working its usually a bug or human error.
Regards
Farrukh
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide