Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Access list sorting

I have just installed a PIX 525 to replace a classic. When you issue a conduit statement on the classic, it automatically grouped the ip addresses together. I am now using ACLs on my new PIX. Is there any way for it to group my ip addresses instead of putting them to the bottom of the ACL. Especially the destination address?

Thanks

1 REPLY
New Member

Re: Access list sorting

There is a new feature in the 6.3 PIX OS that allows you to insert acess-list entries into a specific point of the acess-list. If you are using the 6.3 release, issue the access-list command for the syntax of this feature.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/ab.htm#1067755

You may also find the fairly new feature of object grouping helpful in organizing the hosts and services.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/mngacl.htm#1024374

Otherwise, there is no automatic sorting of the access control rules when using access-lists.

Thanks,

Marcus

103
Views
0
Helpful
1
Replies