After reading through a couple of scenarios in the RME User guide I am still a little confuses on how should I go about deploying an access list permit statement to all the devices I have in Ciscoworks with Netconfig....is this considered an user-defined task if so how do I go about deploying this statement?
You can do this using a User-Defined task or Ad hoc task in Netconfig. Just add your ACLs as you want them to look on the device.
If, however, your device already has an ACL configured, and you want to add new lines, you should use Config Editor or Archive Management Baseline Compliance to do this. Deployment in those situations will remove the current ACL, then add the new lines.
If you did want to use Netconfig to edit an ACL, you would need the first line of your user-defined task or adhoc task to be:
Then you would put back the entire ACL as you want it to appear on the device.
If, however, all you want to do is append statements to an existing ACL, then you can just build a user-defined task or adhoc task that simply adds new lines. For example:
access-list 101 permit ip 10.0.0.0 0.255.255.255 any
Admittedly, the ACL management capability in LMS is no where near as comprehensive as the ACL management capabilities in the ACL Manager application. The Cisco Security Management Suite has some more ACL management capabilities.
Thanks for the quick update.....that is exactly what I wanted to do is to append statements to an existing ACL. I tested using Config Editor and it was fairly simple wasn't sure what system defined task to use to apply ACL Statement.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...