topic Re: ACL operation. in Network Security

ACL operation.

adriatikb — Mon, 11 Mar 2019 11:04:07 GMT

What will happen if delete the access list acl_outbound that still is applied to the inside interface, traffic will stop or will flow freely n pix?

access−group acl_outbound in interface inside

Thanks in advance

Re: ACL operation.

plwalsh — Thu, 30 Aug 2007 10:43:38 GMT

The traffic will stop.

You need an ACL to define the IP traffic that is allowed through the interface. If you want to change the ACL completely you could configure a new ACL (with a different name) and then use the command'access-group NEW_ACL_NAME in interface inside' to apply it. There should be no interruption to traffic flow (assuming the new ACL is configured correctly).

Re: ACL operation.

adriatikb — Thu, 30 Aug 2007 11:59:55 GMT

assuming that i did not configure the nje ACL and a leave the old ALC applied on that insede interface?

what happen?

thanks

Re: ACL operation.

hsajwan — Thu, 30 Aug 2007 12:01:37 GMT

Already established connections do not get checked by access-list. So, even if you remove the access-list, the existing connections will still continue to work. However, new connections may be affected depending on the traffic flow e.g if traffic is going from higher security to lower security, it will be permitted but traffic from lower to higher will be blocked.