No, you won't need to reapply it. You can generally edit while it's in place. The permit any line at the end of the ACL is only needed for outbound traffic usually (depending on the circumstance). There's an implicit deny at the end of the acl and the permit any line overrides that.
The one problem that I see many times is when someone edits the acl thinking that it's going to insert itself into the existing acl - it doesn't unless you tell it to. By default, when you edit the acl, it's going to add it to the end of the line. If you have a "permit any" at the end, and you say you want to deny anyone going to host 1.1.1.1, the acl will look like this:
50 permit ip any any
60 deny ip any host 1.1.1.1
The host will never be denied because it hits line 50 first. To fix that, you have to add the line number before your acl:
45 deny ip any host 1.1.1.1
50 permit ip any any
HTH,
John
*** Please rate all useful posts ***
HTH,
John
*** Please rate all useful posts ***
