Access Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches
Editing ACLs and Creating an ACL Offline
Use no access-list
to remove this line
from ACL 103.
ACL 103 Before Removing
the Second “deny” ACE.
ACL 103 After Removing
the Second “deny” ACE.
Figure 10-27. Example of Deleting an ACE from an ACL
Working Offline To Create or Edit an ACL
Note When creating an ACL offline, ensure that the interfaces to which you plan to
assign the ACL will have adequate per-port rules and ACL masks available.
Note that if you attempt to apply an ACL to multiple interfaces and one of
those interfaces does not have sufficient resources to support the ACL, the
command will fail for all specified interfaces. For more on per-port ACL
resources, refer to
“Planning an ACL Application on a Series 3400cl or Series
6400cl Switch” on page 10-16.
For longer ACLs that would be difficult or time-consuming to accurately
create or edit in the CLI, you can use the offline method:
1. Begin by doing one of the following:
• To edit one or more existing ACLs, use copy command-output tftp to
copy the current version of the ACL configuration to a file in your
TFTP server. For example, to copy the ACL configuration to a file
named acl02.txt in the TFTP directory on a server at 10.28.227.2:
10-67
To Next Page
Loading...
