topic ASA 5550 ACl's in Network Security

ASA 5550 ACl's

Dale Sanderson — Mon, 11 Mar 2019 16:43:10 GMT

Hello,

I am carrying out some cleanup tasks on our 5550 firewall; and am using the syntax below in conf t to remove old access-lists (the majority are access lists left from captures etc) :

host# sh access-list CAP1
access-list SL-CAP; 0 elements
host# conf t
host(config)# clear configure access-list CAP1
host(config)# wr
Building configuration...
[OK]
host(config)# end
host# sh access-list CAP1
access-list CAP1; 0 elements

All other access lists apart from this and one other have removed as expected - I have checked to see if the captures are still running, but they have been removed.

Any advice that you could be provide would be greatly appreciated, thankyou in advance!

Re: ASA 5550 ACl's

Tanveer Deewan — Fri, 27 Nov 2009 00:37:14 GMT

Hi,

can you get the output of the following?

show run | i CAP1

show run | i SL-CAP

Re: ASA 5550 ACl's

Dale Sanderson — Fri, 27 Nov 2009 09:14:07 GMT

Forgive my mistake - there is only one access list I am in reference to - that was my mistake on failing to sanatise the output properly

In full :

host# sh access-list SL-CAP
access-list SL-CAP; 0 elements
host# conf t
host(config)# clear configure access-list SL-CAP
host(config)# wr
Building configuration...

[OK]
host(config)# end
host# sh run | inc SL-CAP

#no output#

host# sh access-list SL-CAP
access-list SL-CAP; 0 elements

Regards