- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-19-2011 03:05 AM - edited 03-11-2019 02:14 PM
Hello,
I'm faily new to the CLI world of the ASA.
1.) I've just added an access rule, but how do I add a remark to this access rule? Do I need to find the line it exists on?
2.) How do I insert a rule before another using CLI?
Thanks
Solved! Go to Solution.
- Labels:
-
NGFW Firewalls
Accepted Solutions

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-19-2011 04:14 AM
Hi Andy,
You can use the command:
show access-list (to show all access-lists, with line number)
or
show access-list
Hope this helps.
Thanks,
Varun
Varun Rao

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-19-2011 03:28 AM
Here you go:
http://www.cisco.com/en/US/customer/docs/security/asa/asa82/command/reference/a1.html#wp1559889
Let me know if you need anything else.
Thanks,
Varun
Varun Rao

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-19-2011 03:34 AM
For eg:
You want to add the remark for this ACL:
access-list test permit ip any any
so the remark would be:
access-list test line 1 remark andy_test_acl
This would put the remark on the top.
Thanks,
Varun
Please do rate helpful posts.
Varun Rao
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-19-2011 04:12 AM
Thanks, how do I show the line numbers, my CLI doesn't show this so it is difficult to use "line x" in the command.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-19-2011 04:14 AM
Hi Andy,
You can use the command:
show access-list (to show all access-lists, with line number)
or
show access-list
Hope this helps.
Thanks,
Varun
Varun Rao

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-19-2011 03:36 AM
Hi Andy,
1) You can add a remark as follows:
access-list
This line is placed at the end of the ACL, if you enter it after adding access-list entries.
2) To add a rule before another, you can specify the line number as follows:
eg: access-list
To see which access-list entry is at which line, use "sh access-list
Hope this helps!
Regards,
Anu
P.S. Please mark this question as resolved if it has been answered. Do rate helpful posts.
