topic Re: Access-list does not exist in Network Security

Access-list does not exist

rogerio.mitsuo — Mon, 11 Mar 2019 11:49:51 GMT

I am trying to remove the access-list of the PIX , but is appearing that the access-list does not exist.Following in annex the access-list

AGUA/B# show run access-list

access-list intranetB_access_in extended deny ip host rgt-infor3.rgt.sabesp.com.br interface intranetB

AGUA/B# show access-list

access-list cached ACL log flows: total 322, denied 0 (deny-flow-max 4096)

alert-interval 300

access-list intranetB_access_in; 11758 elements

access-list intranetB_access_in line 1 extended deny ip host rgt-infor3.rgt.sabesp.com.br interface intranetB (hitcnt=0) 0xb747ec78

AGUA/B(config)# no access-list intranetB_access_in line 1 extended deny ip host rgt-infor3.rgt.sabesp.com.br interface intranetB

Specified access-list does not exist at that line

Re: Access-list does not exist

Collin Clark — Thu, 17 Jan 2008 15:27:42 GMT

You're close, you do not need line 1, so it should be-

no access-list intranetB_access_in extended deny ip host rgt-infor3.rgt.sabesp.com.br interface intranetB

HTH and please rate

Re: Access-list does not exist

rogerio.mitsuo — Thu, 17 Jan 2008 15:39:05 GMT

I try(copy/paste with no) in CLI without the line 1 , but the same message appeared to me

AGUA/B(config)# no access-list intranetB_access_in extended deny ip host rgt-infor3.rgt.sabesp.com.br interface intranetB

Specified access-list does not exist

I tried also by ASDM with option DELETE , but the message is the same "Specified access-list does not exist".

Re: Access-list does not exist

Collin Clark — Thu, 17 Jan 2008 15:45:16 GMT

Can you post a sanitized ACL? Command should be show run | inc intranetB_access_in

Re: Access-list does not exist

rogerio.mitsuo — Thu, 17 Jan 2008 16:00:25 GMT

Yes.

AGUA/B# show run | inc intranetB_access_in

access-list intranetB_access_in extended deny ip host rgt-infor3.rgt.sabesp.com.br interface intranetB

access-group intranetB_access_in in interface intranetB

Re: Access-list does not exist

Collin Clark — Thu, 17 Jan 2008 16:28:43 GMT

I think the name might be the problem. Try this,

firewall#config t

firewall(config)# no names

Then find the entry you want to remove. The names will be gone and IP's will be in their place. Then try removing it. Let us know what happens.

Re: Access-list does not exist

rogerio.mitsuo — Thu, 17 Jan 2008 17:03:23 GMT

Following the result :

AGUA/B(config)#no names

AGUA/B(config)#show run | inc intranetB_acess_in

access-list intranetB_access_in extended deny ip host 10.217.9.103 interface intranetB

access-group intranetB_access_in in interface intranetB

AGUA/B(config)#no access-list intranetB_access_in extended deny ip host 10.217.9.103 interface intranetB

Specified access-list does not exist

AGUA/B(config)#

Re: Access-list does not exist

Collin Clark — Thu, 17 Jan 2008 17:15:10 GMT

Is there anything in the log? There are other lines in the ACL correct?

Re: Access-list does not exist

rogerio.mitsuo — Thu, 17 Jan 2008 18:10:56 GMT

I will see the log tommorow cause the backup is done of one day to other. Yes - correct

Re: Access-list does not exist

rogerio.mitsuo — Fri, 18 Jan 2008 16:25:48 GMT

Following the log :

Jan 17 12:31:48 pix525-B %PIX-0-111008: User 'rmitsuo' executed the 'no access-list intranetB_access_in extended deny ip host rgt-infor3.rgt.sabesp.com.br interface intranetB' command.

Jan 17 12:31:48 pix525-B %PIX-0-111008: User 'failover' executed the 'no access-list intranetB_access_in extended deny ip host rgt-infor3.rgt.sabesp.com.br interface intranetB' command.

Re: Access-list does not exist

rogerio.mitsuo — Mon, 27 Jul 2009 12:55:14 GMT

Please. I am not getting to install a csm 3.2.0 . The following message is appearing . The directory does not exist. Please choose the correct directory.

Thanks