topic Re: Disabling an ACL entry in Network Security

Disabling an ACL entry

phil96564 — Fri, 21 Feb 2020 16:41:52 GMT

Hi all

I need to disable a number of access list rules on ASA version 9.7. I know I just need to add "inactive" to the end of the rule but 1. do we simply enter the rule exactly as it currently is then add inactive, ie does it recognise that we are disabling an existing rule as opposed to creating a new (inactive) rule

2. Do we need to include the line number in the inactive rule command?

Thanks in advance

Phil.

Re: Disabling an ACL entry

shaps — Thu, 24 Jan 2019 15:06:03 GMT

As far as I remember if you copy the statement along with the line number and then append it with the inactive key word, this should work.

if you use the question mark at the end of the statement before applying to verify or create a dummy rule that doesnt really do anything then try with that.

Re: Disabling an ACL entry

ngkin2010 — Thu, 24 Jan 2019 16:13:03 GMT

1. yes, no duplicated rule is allowed. So the exactly same rule with "inactive" keyword will simply update the existing one.

2. no.

Re: Disabling an ACL entry

Marius Gunnerud — Thu, 24 Jan 2019 19:52:10 GMT

Optionally you can do this in ASDM. Just un-check the box next to the rule. and click Apply and then save once you are done.

Re: Disabling an ACL entry

phil96564 — Fri, 25 Jan 2019 14:04:27 GMT

Thanks for all the replies 🙂