Access List Problem

mansoor_nawaz78 · ‎03-11-2006

I have that access list in running configuration, and i want to remnove a Single IP from the access list 111, when i execute this command all access listt 111 is removed fron the running configuration.

(conf)#no access list 111 permit ip host X.X.X.X any

access-list 111 permit ip host A.B.C.D any

mahmoodmkl · ‎03-11-2006

HI

the problem u r facing is natural becoz as u r using the extended access-list.u cannot edit them.U would have edited a particular line if u have used named extended access-list.for now do one thing prepare a access-list in the notepad with a different number according to the settings u want then remove the present access-list n paste the new one.then apply it where u want.

HTH

Mahmood

pkhatri · ‎03-11-2006

Hi,

Another option you have is to user a named extended list. Named ACLs allow you to delete individual lines without removing the entire ACL.

For example, you could configure your ACL as follows using a named ACL:

ip access-list extended MyACL

permit ip host A.B.C.D any

permit ip host E.F.G.H any

Then, if you wanted to remove a line, you could simply do the following:

ip access-list extended MyACL

no permit ip host A.B.C.D any

Hope that helps - pls rate the post if it does.

Paresh

mansoor_nawaz78 · ‎03-12-2006

Thank You,

IT START TO WORK

glen.grant · ‎03-11-2006

I believe everyone should be using named . As previously said you can add and delete individual lines in the acl. With the latest codes you can place the lines anywhere you want within the acl .