Keith,

If you have an existing ACL you will be able to continue to add lines to it without a problem. Now I can't remember if 6.3.x but I know int 6.3.4 you can insert lines anywhere into the ACL.

Example:

sh access-list 100

OUTPUT:

access-list 100 line 1 permit tcp any any eq www

access-list 100 line 2 permit tcp any any eq ftp

access-list 100 line 3 deny ip any any

Lets say I would like to insert a line for telnet before the web traffic without haveing to paste the entire acl. I would simply type in the following line.

access-list 100 line 1 permit tcp any any eq telnet

My new acl would look like this:

sh access-list 100

access-list 100 line 1 permit tcp any any eq telnet

access-list 100 line 2 permit tcp any any eq www

access-list 100 line 3 permit tcp any any eq ftp

access-list 100 line 4 deny ip any any

Now lets say I need to get rid of the ftp I would type in the following.

no access-list 100 line 3 permit tcp any any eq ftp

MY acl now looks like this:

sh access-list

access-list 100 line 1 permit tcp any any eq telnet

access-list 100 line 2 permit tcp any any eq www

access-list 100 line 3 deny ip any any

Patrick Laidlaw

Please rate any posts that were helpful.