BigIron RX Series Configuration Guide 561
53-1002253-01
Deleting ACL entries
21
The <acl-number> parameter specifies the ACL entry to be deleted. The <acl-num> parameter
allows you to specify an ACL number if you prefer. If you specify a number, enter a number from 1 –
99 for standard ACLs, 100 – 199 for extended ACLs, or 500 – 599 for super ACLs.
You must enter the complete deny or permit statement for the <entire-deny-or-permit-statement>
variable.
Complete the configuration by specifying options for the ACL entry. Options you can use to
configure standard or extended numbered ACLs are discussed in “Configuring standard numbered
ACLs” on page 529 and “Configuring extended numbered ACLs” on page 531. Options you can use
to configure super ACLs are described in “Configuring super ACLs” on page 542.
From named ACLs
To delete an ACL entry from an ACL named "entry", do the following.
1. Enter the following command to display the contents of the ACL list.
BigIron RX#show access-list name entry
Standard IP access list entry
deny host 1.2.4.5
deny host 10.1.1.1
deny host 5.6.7.8
permit any
2. To delete the second ACL entry from the list, enter a command such as the following.
BigIron RX(config)#ip access-list standard entry
BigIron RX(config-std-nacl)#no deny host 10.1.1.1
3. Enter the show access-list name entry command to display the updated list.
BigIron RX(config)# ip show access entry all
Standard IP access list entry
deny host1.2.4.5
deny host 5.6.7.8
permit any
Syntax: ip access-list standard | extended <acl-name> | <acl-number>
Syntax: no <entire-deny-or-permit-statement>
The extended | standard parameter indicates the ACL type.
The <acl-name> parameter is the ACL name. You can specify a string of up to 255 alphanumeric
characters. You can use blanks in the ACL name if you enclose the name in quotation marks (for
example, “ACL for Net1”). The <acl-num> parameter allows you to specify an ACL number if you
prefer. If you specify a number, enter a number from 1 – 99 for standard ACLs or 100 – 199 for
extended ACLs. Super ACLs must always be numbered instead of named, from 500 – 599.
You must enter the complete deny or permit statement for the <entire-deny-or-permit-statement>
variable.
To Next Page
Loading...
