IPv4 Access Control Lists (ACLs)

Editing an Existing ACL

Resequencing the ACEs in an ACL

This action reconfigures the starting sequence number for ACEs in an ACL, and resets the numeric interval between sequence numbers for ACEs config­ ured in the ACL.

Syntax: ip access-list resequence < name-str 1 - 99 100 - 199 >

< starting-seq-# > < interval >

Resets the sequence numbers for all ACEs in the ACL.

<starting-seq-#> : Specifies the sequence number for the first ACE in the list. (Default: 10; Range: 1 - 2147483647)

<interval > : Specifies the interval between sequence numbers for the ACEs in the list. (Default: 10; Range: 1 - 2147483647)

1.To view the current sequence numbering in an ACE, use show run or show access-list < name-str 1 - 99 100-199 >.

2.Use the command syntax (above) to change the sequence numbering.

This example resequences the “My-List” ACL at the bottom of figure 9-21 so that the list begins with line 100 and uses a sequence interval of 100.

ProCurve(config)# show run

. . .

ip access-list standard "My-List" 10 permit 10.10.10.25 0.0.0.0 15 deny 10.10.10.1 0.0.0.255 30 deny 10.20.10.1 0.0.0.255

40 permit 0.0.0.0 255.255.255.255 exit

. . .

ProCurve(config)# ip access-list resequence My-List 100 100 ProCurve(config)# show run

. . .

ip access-list standard "My-List" 100 permit 10.10.10.25 0.0.0.0 200 deny 10.10.10.1 0.0.0.255 300 deny 10.20.10.1 0.0.0.255

400 permit 0.0.0.0 255.255.255.255 exit

Figure 9-22. Example of Viewing and Resequencing an ACL

9-80