Deleting acl entries, From numbered acls, Named acls: deleting a comment – Brocade BigIron RX Series Configuration Guide User Manual
Page 709
BigIron RX Series Configuration Guide
631
53-1002484-04
Deleting ACL entries
22
•
<acl-name> - ACL name. You can specify a string of up to 255 alphanumeric characters. You
can use blanks in the ACL name if you enclose the name in quotation marks (for example, “ACL
for Net1”).
•
<acl-num> - ACL number (for example, super ACLs). Specify a number from 1 – 99 for standard
ACLs, 100 – 199 for extended ACLs, and 500 – 599 for super ACLs.
•
remark <string> - adds a comment to the ACL entry. The comment can contain up to 255
characters. Comments must be entered separately from actual ACL entries; that is, you cannot
enter an ACL entry and an ACL comment with the same command. Also, in order for the remark
to be displayed correctly in the output of show commands, a comment must be entered
immediately before the ACL entry it describes.
•
deny | permit - denies or permits specified traffic.
•
<options> - Complete the configuration by specifying options for the standard, extended, or
super ACL entry. Options you can use to configure standard or extended named ACLs are
discussed in
“Configuring standard or extended named ACLs”
on page 611. Options for
configuring super ACLs are described in
Named ACLs: deleting a comment
To delete a remark from a named ACL, enter the following command.
BigIron RX(config)#ip access-list standard entry
BigIron RX(config-std-nacl)#no remark Deny traffic from Marketing
Syntax: no remark <string>
Deleting ACL entries
Newly created ACL entries are appended to the end of the ACL list. Since ACL entries are applied to
data packets in the order they appear in a list, you need to create ACLs in the order you want them
applied.
If you want to delete an ACL entry from within a list, enter a show command as discussed in
on page 615 to determine the line number of the entry you want to
delete. Then enter a command as shown one of the two sections below.
From numbered ACLs
If you want to delete the second entry from a numbered ACL such as ACL 99, do the following.
1. Display the contents of the list.
BigIron RX(config)#show access-list 99
Standard IP access-list 99
deny host 1.2.4.5
deny host 5.6.7.8
permit any
2. Enter the following command.
BigIron RX(config)#no access-list 99 deny host 5.6.7.8
3. Display the contents of the updated list.