Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Pix IP readdressing question

Status
Not open for further replies.

1491

MIS
Sep 17, 2002
3
0
0
US

I have a Pix 520 and run a private network behind it. Corp. told us we need to change the the second octet on our IP scopes. Currently we are on 10.76.x.x and need to go to 10.78.x.x. My question is we have a lot of access list in the Pix and I don't want to remove them and readd them again just to change the 2nd octet. Can anyone suggest a way to change these ip's without removing the ACL's.
Thanks....
 
If you do it in notepad, then just paste it over the existing one.

Have the first line be like no access-list "someacl" then the rest of the modified acl.
 
So you mean to do the following in notepad and then cut and paste back into the config?

no access-list ipsec permit ip 10.76.x.x 255.255.255.128 148.x.x.x 255.255.0.0

access-list ipsec permit ip 10.78.x.x 255.255.255.128 148.x.x.x 255.255.0.0

Thanks inadvance......
 
HI.

Instead of using multiple "no" commands, you can also do:
backup the configuration (use both "write term" and "write net").
clear the configuration ("write erase" + "reload")
connect using serial console
restore modified config (copy and paste, or "conf net")
reload again and do whatever needed.

I'm not sure which method is best for you - using "no" commands is also a good method.



Yizhar Hurwitz
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top