Automatically add acl line before deny in ASA

[networkinggeek]

Hi- I added a new access list statement, but it went after deny. The only way I had to move was using ASDM software. How can add an acl line before deny in acl?

e-g

remark test

 access-list inside_in line 7 extended permit tcp host 1.1.1.1 host 2.2.2.2

 access-list inside_in line 7 extended permit tcp host 3.3.3.3 host 4.4.4.4

Now I want to add the following line to above acl, making sure it goes before deny statement? some platforms have option to add before deny statement

access-list inside_in extended permit tcp host w.x.y.z host p.q.r.s eq 8000 

Sal

[balaji.bandi]

2 Steps to acheive this.

1. sh access-list inside_in ( if the deny statement line 70 -  then you add below rule line 69)

2. access-list inside_in line 69 extended permit tcp host w.x.y.z host p.q.r.s eq 8000 

Tweak as per the requirement.

[Mohammed al Baqari · Accepted solution]

get the line number for deny acl using sh access-l inside_in | i deny

then enter your new acl with same number as deny acl. This will push the
deny acl down and insert your new acl above it.

**** remember to rate useful posts