topic Re: Correct command to remove entire ACL in ASA? in Network Security

Correct command to remove entire ACL in ASA?

ttrevino1 — Mon, 11 Mar 2019 10:46:05 GMT

I need to remove a couple of outdated ACL's in my ASA, but when I use the command "no access-list outdated1", it says it's an incomplete command. I can't just go through and remove each line, as there are about 500 entries for each outdated acl I need to remove.

Re: Correct command to remove entire ACL in ASA?

acomiskey — Wed, 18 Jul 2007 12:57:52 GMT

clear configure access-list

Please rate helpful posts.

Re: Correct command to remove entire ACL in ASA?

srue — Wed, 18 Jul 2007 13:13:14 GMT

obviously acomiskey's answer is what you were looking for, but you could have done it a different way.

when i have to do bulk edits (not deleting an entire ACL) i simply use textpad (an alternative to notepad) to do a quick search and replace...

so in your case, you could have copied the entire ACL into your fav. text editor,

and did a search for 'access-list' and simply replace with 'no access-list', then paste that back into the firewall.

again, acomiskey's solution is the obvious choice here, just wanted to let you know there are other ways.

(just make sure with bulk pastes you are using a terminal emulator that can support that sort of buffer size..hypterminal canNOT by default, and neither can the windows telnet client).

Re: Correct command to remove entire ACL in ASA?

ttrevino1 — Wed, 18 Jul 2007 13:19:45 GMT

That took care of it, thanks!

Re: Correct command to remove entire ACL in ASA?

ttrevino1 — Wed, 18 Jul 2007 13:21:14 GMT

I have used notepad as you mentioned to find and replace when I've had several lines to change, and it does work very well using Putty. I was looking for a simple one line removes it all command.

Thanks for the help from both responses! 🐵