Easy Cisco ACL Editing
If you want to make an ACL change
at anytime follow these steps of changing an ACL.
Login to Router or switch that needs an ACL
change.
Issue
the following command:
Router# sh ip
access-lists [access-list name or #]
Note
the line numbers of where you need to insert a line or delete a line.
Cisco Nexus Changes
When
you need to insert a line or lines issue the following commands on all Nexus
devices:
NexusRouter# conf
t
NexusRouter(config)# ip access-list [name or #]
NexusRouter(config-acl)#
(line #) permit (tcp/udp/ip) source ip(x.x.x.x/x) destination ip(y.y.y.y/y)
(port)
Cisco IOS Changes
When
you need to insert a line on lines issue the following commands on all Cisco
gear except Nexus:
Router# conf t
Router(config)# ip
access-list extended [name or #]
Router(config-acl)#
(line #) permit (tcp/udp/ip) source ip wildcard mask(x.x.x.x y.y.y.y) destination ip wildcard mask.
Lines
will never be overwritten during an ACL change it will error out. You will have
to say no line number and then renter the line with a new line number. This is universal against all Cisco gear.
Router(config-acl)#no
(line #)
If
you need to re-sequence the line numbers
you can by issuing the following commands:
On Nexus Gear:
NexusRouter(config)#
resequence ip access-list [name or #] [start #] [increment step]
On Cisco Gear:
Router(config)# ip
access-list resequence [name or #] [start #] [increment step]
