topic Re: At end of ACL, what means "inactive"? in Network Security

At end of ACL, what means "inactive"?

MicJameson1 — Fri, 23 Dec 2022 00:36:13 GMT

Hi.

ACE...

access-list ENTERPRISE_DMZ_IN extended permit ip host 172.16.1.1 host 172.16.1.5 inactive

At end of this ACL, what does the command "inactive" do?

Thank you!

Re: At end of ACL, what means "inactive"?

MHM Cisco World — Fri, 23 Dec 2022 00:54:57 GMT

meaning you add it and it inactive,
usually this keyword is add if you have new FW and you need to complete the config then active the ACL.

Re: At end of ACL, what means "inactive"?

Kasun Bandara — Fri, 23 Dec 2022 03:33:52 GMT

i guess you are talking about config of ASA. this happens when you deactivate the ACL via ASDM or CLI. even that available in config, it will not actively do anything in operations.

Re: At end of ACL, what means "inactive"?

MHM Cisco World — Fri, 23 Dec 2022 09:13:54 GMT

I run small lab
the R2 connect to OUT (0 level )
the R1 connect to IN (100 level)
you can see access-list with inactive disable the ACL and R2 can not ping R1 inside.
immediate after I remove inactive the R2 can ping R1.