ACL list Editing:
ACL list Editing:
1. Create an ACL list
R1 (config) # access-list 101 deny tcp 11.1.1.0 0.0.255 192.168.1.0 0.0.255 eq 23
R1 (config) # access-list 101 deny icmp 11.1.1.3 0.0.0.0 host 192.168.1.1
R1 (config) # access-list 101 deny icmp 11.1.1.1 0.0.0.0 host 172.16.1.1
R1 (config) # access-list 101permit ip any any
2. Apply the ACL list to the port
R1 (config) # interface fastEthernet 0Universe 0
R1 (config-if) # ip access-group 101in
3. Display the ACL list
R1#show access-list / / show R1 all access lists
Extended IP access list 101
10 deny tcp 11.1.1.0 0.0.0.255 192.168.1.0 0.0.0.255 eq telnet
20 deny icmp host 11.1.1.3 host 192.168.1.1
30 deny icmp host 11.1.1.1 host 172.16.1.1
40 permit ip any any (40 matches)
List of R1#show access-list 101s / / show R1 No. 101,
4. Edit the ACL list
R1 (config) # ip access-list extended 101
/ / Delete the list No. 10, 20 and 30
R1 (config-ext-nacl) # no 10
R1 (config-ext-nacl) # no 20
R1 (config-ext-nacl) # no 30
/ / add list
R1 (config-ext-nacl) # deny tcp 11.1.1.0 0.0.255 192.168.1.0 0.0.255 eq 23
R1 (config-ext-nacl) # deny icmp 11.1.1.3 0.0.0.0 host 192.168.1.1
R1 (config-ext-nacl) # deny icmp 11.1.1.1 0.0.0.0 host 172.16.1.1
R1#show access-list / / show R1 all access lists
Extended IP access list 101
10 deny tcp 11.1.1.0 0.0.0.255 192.168.1.0 0.0.0.255 eq telnet
20 deny icmp host 11.1.1.3 host 192.168.1.1
30 deny icmp host 11.1.1.1 host 172.16.1.1
40 permit ip any any (40 matches)
/ / insert list
R1 (config-ext-nacl) # 25 deny icmp host 11.1.1.2 host 192.168.1.1
R1#show ip access-lists
Extended IP access list 101
10 deny tcp 11.1.1.0 0.0.0.255 192.168.1.0 0.0.0.255 eq telnet
20 deny icmp host 11.1.1.3 host 192.168.1.1
25 deny icmp host 11.1.1.2 host 192.168.1.1 / / New Strategy for insertion
30 deny icmp host 11.1.1.1 host 172.16.1.1
40 permit ip any any (40 matches)
