Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 141)

Multi-Service IronWare Security Configuration Guide 123
53-1003035-02
Modifying ACLs
3
Adding or deleting a comment
You can add or delete comments to an IP ACL entry.
Numbered ACLs: Adding a comment
To add a comment to an ACL entry in a numbered IPv4 ACL, perform the tasks listed below.
1. Use the show access-list to display the entries in an ACL.
Example
Brocade(config-std-nacl)# show access-list 99
Standard IP access-list 99
deny host 10.2.4.5
permit host 10.6.7.8
2. To add the comment “Permit all users” to filter “permit any” (the ACL remark is attached to the
filter “permit any” as instructed in Step 4). Enter a command such as the following.
Brocade(config)# access-list 99 remark Permit all users
3. Entering a show access-list command displays the following:
Brocade(config-std-nacl)# show access-list 99
Standard IP access-list 99
deny host 10.2.4.5
permit host 10.6.7.8
ACL Remarks: Permit all users
4. Enter the filter “permit any”.
Example
Brocade (config-std-nacl)# permit any
5. Entering a show access-list command displays the following.
Brocade(config-std-nacl)# show access-list 99
Standard IP access-list 99
deny host 10.2.4.5
permit host 10.6.7.8
ACL Remarks: Permit all users
permit any
Syntax: [no] access-list acl-num remark comment-text
Simply entering access-list acl-num remark comment-text adds a remark to the next ACL entry you
create.
The remark comment-text adds a comment to the ACL entry. The remark can have up to 128
characters in length. The comment must be entered separately from the actual ACL entry; that is,
you cannot enter the ACL entry and the ACL comment with the same command. Also, in order for
the remark to be displayed correctly in the output of show commands, the comment must be
entered immediately before the ACL entry it describes.
NOTE
An ACL remark is attached to each individual filter only, not to the entire ACL (ACL 199).