Can you add statements to an acl without having to recreate it?

[CaGirl]

Sorry everyone; I'm kinda new to this- this is my last question. I have an access list that contains several statements and is already created and working. I now need to add a few more statements to it. I've heard that this can be done without recreating the whole acl- is this true? If so, how? I've also heard that additions to an acl appear at the very bottom of the list- how can I rearrange them? Thank you very much for your help!

 

[wybnormal]

yes.. you can. The best way is to copy the config, edit the access list to be exactly how you want it.. remove the running access list and then paste in the new one. No mess, no fuss. Dont forget the implied deny all at the end. Also, put the most matched (most expected match?) ACLs at the top to help ease on the CPU processing power needed. Not such a big deal with little bitty ACLs.. but on a heavily used router and a nasty list, it all adds up.

MikeS


Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu