How to add "remark" when modifing the named ACL ?

xuan.sun · ‎10-29-2008

There is a sequence number with named ACL. I can use the sequence number to add new ACL entry in the current ACL.

But I notice it does not allow me to put "remark". We use "remark" in ACL to section the ACl to make it more logically.

Ext Access List configuration commands:

<1-2147483647> Sequence Number

default Set a command to its defaults

deny Specify packets to reject

dynamic Specify a DYNAMIC list of PERMITs or DENYs

evaluate Evaluate an access list

exit Exit from access-list configuration mode

no Negate a command or set its defaults

permit Specify packets to forward

remark Access list entry comment

R1-3640-WAN(config-ext-nacl)#10 ?

deny Specify packets to reject

dynamic Specify a DYNAMIC list of PERMITs or DENYs

evaluate Evaluate an access list

exit Exit from access-list configuration mode

permit Specify packets to forward

See "remark" is not under "sequence". Why ?

Any workaround ?

Thank you in advance.

ajagadee · ‎10-29-2008

Hi Xuan,

Yes, you are correct, there is no option for "remark" using the sequence option while editing ACL Entries. This is a known limitation.

The only workaround that I am aware of, which I am sure you already know is to edit the access list via an external editor and remove and re-add the extended access list.

Regards,

Arul

*Pls rate if it helps*