clear one access-list line

[Teresa.A.Strickland]

A co-worker asked me if it is possible to clear only one line of an access-list on an ASA. I've never had the need to do that but I'm curious now. Can it be done?

[Mike.Cifelli]

Yes. It would look like this:
conf t
IP access-list ext ACL
no 10 (sequence number of the line you want to remove)
Good luck!

[Jaderson Pessoa · Accepted solution]

Hello,

Ind addtion above comment.

no permit ip x.x.x.x(ip) x.x.x.x(mask)

[Karsten Iwen]

The other two answers are only valid for IOS, not for the ASA. On the ASA you also remove the one line with a "no" in front of that line. Or are you referring to a "clear counter" for that ACE? That is not possible.