topic Re: Remove ACL from ACE(object-group) in Network Security

Remove ACL from ACE(object-group)

amit.secure1 — Mon, 11 Mar 2019 11:35:30 GMT

Hi,

I need to remove only an ACL entry from ACE which i created by adding network object in object-group.....i am not able to do same because all ACL having same line no. and ACL name.

#access-list acl-in line 120 extended permit tcp object-group xxx-xxx-xxx host x.x.x.x eq xxxx

access-list acl-in line 120 extended permit tcp host x.x.x.x host x.x.x.x eq xxx

any idea to remove........

Re: Remove ACL from ACE(object-group)

arif786 — Tue, 27 Nov 2007 13:53:48 GMT

why can't u copy that exact statement, and go for?

Re: Remove ACL from ACE(object-group)

srue — Tue, 27 Nov 2007 14:01:25 GMT

you have to remove it from the object-group. you can't selectively allow only parts of an object group in an ACL.

Re: Remove ACL from ACE(object-group)

amit.secure1 — Tue, 27 Nov 2007 14:01:54 GMT

I tried same but not able to do so, getting below error...

Specified access-list does not exist

Re: Remove ACL from ACE(object-group)

amit.secure1 — Tue, 27 Nov 2007 14:05:39 GMT

I can't remove from object-group because i allow traffic of same source>>>>diffrent destination ip and port.......

if i will remove from object then all acl will be remove for that ip from object-group and other servers will be out of customer access.....

Re: Remove ACL from ACE(object-group)

srue — Tue, 27 Nov 2007 15:13:00 GMT

use two different object groups then.

Re: Remove ACL from ACE(object-group)

amit.secure1 — Tue, 27 Nov 2007 15:16:44 GMT

i having so many acl with same configuration in diffrent object group so it's very tuff to remove from object-group then add acl in another object-group....