Firewall Wizards mailing list archives

Re: Cisco acls


From: Luca Berra <bluca () comedia it>
Date: Sun, 6 Mar 2005 11:59:13 +0100

On Tue, Mar 01, 2005 at 12:01:01PM -0800, Steve Saeedi wrote:
If you have a tftp server handy you can tftp the modified ACLs section of your router in a file with the first line reading, "no access-list 177". It's a lot faster than paste. I haven't tried scp.

this is especially useful since when loading a piece of config via TFTP,
it is first loaded, then applied (nearly atomically), while entering it
line-by-line would apply each line when entered.

another possibility for editing access-lists is the use of the
"ip access-list extended <number-or-name>", which should be supported on
every non-obsolete version of IOS.
L.

--
Luca Berra -- bluca () comedia it
       Communication Media & Services S.r.l.
/"\
\ /     ASCII RIBBON CAMPAIGN
 X        AGAINST HTML MAIL
/ \
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: