cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3808
Views
5
Helpful
4
Replies

Cannot delete a line from an Access-List

Nathan Hawkins
Beginner
Beginner

Hello All,

I'm trying to eliminate some hitcount 0 ACLs, and I'm getting the error "Specified access-list does not exist" when I try. Here's the ACL I'm working with:

access-list acl_DMZ line 1 extended permit ip object-group DM_INLINE_NETWORK_3 any (hitcnt=0) 0xa75c6fc3

  access-list acl_DMZ line 1 extended permit ip 10.11.12.0 255.255.255.0 any (hitcnt=0) 0x78859c06

  access-list acl_DMZ line 1 extended permit ip 192.168.1.0 255.255.255.0 any (hitcnt=0) 0x147dd28d

  access-list acl_DMZ line 1 extended permit ip 192.168.254.0 255.255.255.0 any (hitcnt=0) 0x88d63265

access-list acl_DMZ line 2 extended permit icmp any any object-group DefaultICMP (hitcnt=0) 0x35224259

  access-list acl_DMZ line 2 extended permit icmp any any echo-reply (hitcnt=0) 0x5295f227

  access-list acl_DMZ line 2 extended permit icmp any any unreachable (hitcnt=0) 0x05778545

  access-list acl_DMZ line 2 extended permit icmp any any time-exceeded (hitcnt=0) 0x84e68958 access-list acl_DMZ line 1 extended permit ip object-group DM_INLINE_NETWORK_3 any (hitcnt=0) 0xa75c6fc3
  access-list acl_DMZ line 1 extended permit ip 10.11.12.0 255.255.255.0 any (hitcnt=0) 0x78859c06
  access-list acl_DMZ line 1 extended permit ip 192.168.1.0 255.255.255.0 any (hitcnt=0) 0x147dd28d
  access-list acl_DMZ line 1 extended permit ip 192.168.254.0 255.255.255.0 any (hitcnt=0) 0x88d63265
access-list acl_DMZ line 2 extended permit icmp any any object-group DefaultICMP (hitcnt=0) 0x35224259
  access-list acl_DMZ line 2 extended permit icmp any any echo-reply (hitcnt=0) 0x5295f227
  access-list acl_DMZ line 2 extended permit icmp any any unreachable (hitcnt=0) 0x05778545
  access-list acl_DMZ line 2 extended permit icmp any any time-exceeded (hitcnt=0) 0x84e68958

As a test I'm trying to delete the 2nd line down "access-list acl_DMZ line 1 extended permit ip 10.11.12.0 255.255.255.0 any" by issuing the command "no access-list acl_DMZ line 1 extended permit ip 10.11.12.0 255.255.255.0 any". When I try to do so I get the error "Specified access-list does not exist"...

So what do I do to remove that line?

1 Accepted Solution

Accepted Solutions