- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-11-2021 05:09 AM
I have an ASA with about 8 subinterfaces.. due to a recent requirement the rules in 2 subinterfaces are required to be transferred to a new subinterface..
for ex: interface A - 100 rules
Interfaces B - 50 rules
New Interface C - 100+50 = 150 rules
What is the best way i can combine rules from A and B and move them over to C ?
i read that via access-group command i can copy rules from one to another but isnt it 1 to 1 mapping only ?
any other way to do this efficiently.
Thanks
Solved! Go to Solution.
- Labels:
-
Appliances
Accepted Solutions

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-11-2021 05:21 AM
Hello @NeWGuy1109,
That is true, the access-group command is a 1-to-1 mapping and there is no such command to combine two different access-lists to one. Personally, I would recommend copying all the rules to a text editor such as notepad, combine them and paste with a new name. This way you can manage them all separately.
***Please mark all helpful responses***
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-11-2021 06:29 AM
You are copying the "show access-list" output. You need to copy the "show runn access-list" command output that will get rid of these values.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-11-2021 05:21 AM
Hello @NeWGuy1109,
That is true, the access-group command is a 1-to-1 mapping and there is no such command to combine two different access-lists to one. Personally, I would recommend copying all the rules to a text editor such as notepad, combine them and paste with a new name. This way you can manage them all separately.
***Please mark all helpful responses***
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-11-2021 05:58 AM
Thanks for the reply..
the only issue with it is that while copying the access rules ..at the very end of each line i am getting these values
(hitcount=2???) 0x????
which are different for each line..any way i can remove these together ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-11-2021 06:29 AM
You are copying the "show access-list" output. You need to copy the "show runn access-list" command output that will get rid of these values.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-11-2021 06:47 AM
Thanks a lot
