sh access-list
It lists the acl's, and their corresponding numbered statements. Pick the statement you want to delete, and then do this...let's use acl 110,for example...you see
10 permit tcp any any eq 21
20 deny tcp any any
30 permit ip any any
and you want to delete line 10...
router>en
router#sh access-list
shows you acls, with numbered statements...
router#conf t
router(config)#ip access-list 110 extended
(something like that---you may need the "?", as I don't have a router in front of me---it may be "ip access-list extended 110")
router(config-nacl)#no 10
Then put in the "no" and the number...to ad statements, pick where you want it in the list, and make a number to fit in, as they are gone through by the router until a match is made. For example, if you want to add a line in between 10 and 20...
router(config-nacl)#15 deny ip any 10.10.10.0 0.0.0.255
Like that.I also cannot remember what the exact syntax will be the router displays when in this mode (may be "router(config-ext-nacl)# or something like that).
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.