thanks Collin,

so it safe to take the command out of the config. if there is no ACL, there is no reason to leave that line in the config is that right ?

Thanks again

"if there is no ACL, there is no reason to leave that line in the config is that right ?"

Correct. If there is nothing left in the config to reference access-list 23 then you are safe to remove it.

Jon

yes that is correct !! I was told is part of the config by default for http access

That is not show run output. That is config to copy & Paste from file.

you r correct , that was not in a config , it was on the copy/ past config , but still why that command in there ? ..

The command was in the copy/paste config because there is an access list 23 in the running config which is no longer useful and someone wants to remove it.

SDM will typically insert an access list 23 into the config to authenticate for the vty and for http:

access-list 23 permit 10.10.10.0 0.0.0.7

this allows the addresses which SDM will provide by default to access the router.

Since SDM put the access list into the config, but since your organization chooses (wisely I believe) to not retain them in the config, then it is necessary to remove the access list from the running config. That is why it is in the copy/paste config.

HTH

Rick

sorry , that was not in sh run , I spook fast ..this was on a file that meant to be past to a router .

Thanks