Cisco Nexus 5500 Series - Resequence

229
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter R Commands
resequence
resequence
To reassign sequence numbers to all rules in an access control list (ACL) or a time range, use the
resequence command.
resequence [ip | ipv6 | mac] access-list access-list-name starting-number increment
resequence time-range time-range-name starting-number increment
Syntax Description
Command Default None
Command Modes Global configuration mode
Command History
Usage Guidelines The resequence command allows you to reassign sequence numbers to the rules of an ACL or time
range. The new sequence number for the first rule is determined by the starting-number argument. Each
additional rule receives a new sequence number determined by the increment argument. If the highest
sequence number would exceed the maximum possible sequence number, then no sequencing occurs and
the following message appears:
ERROR: Exceeded maximum sequence number.
The maximum sequence number is 4294967295.
Examples This example shows how to resequence an IPv4 ACL named ip-acl-01 with a starting sequence number
of 100 and an increment of 10, using the show ip access-lists command to verify sequence numbering
before and after the use of the resequence command:
switch(config)# show ip access-lists ip-acl-01
IP access list ip-acl-01
ip
ipv6
mac
Type of the ACL.
access-list
access-list-name
Specifies the name of the ACL.
time-range
time-range-name
Specifies the name of the time range.
starting-number Sequence number for the first rule in the ACL or time range.
increment Number that the switch adds to each subsequent sequence number.
Release Modification
5.2(1)N1(1) This command was introduced.