cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
312
Views
5
Helpful
1
Replies

How to delete the lines of access list

Chriskoh
Level 1
Level 1

Hi

I tried to delete the red line as below using CLI command.. But I put a "no" in front as follows:- It said Error: %invalid Hostname. Anyone please enlighten me? 

Thanks 

 

ASA(config)# no access-list internal.in line 4 extended permit tcp 172.30.48.0 255.255.254.0 any eq ssh (hitcnt=0) 0x4bea78fb

 

access-list internal.in line 1 remark -------------------------------
access-list internal.in line 2 remark - Permit VPN access -
access-list internal.in line 3 remark -------------------------------
access-list internal.in line 4 extended permit object-group secure2vpnclient object-group secure.lan any 0x6faee694
  access-list internal.in line 4 extended permit udp 172.30.48.0 255.255.254.0 any eq 50 (hitcnt=0) 0x934e496a
  access-list internal.in line 4 extended permit udp 172.30.48.0 255.255.254.0 any eq 2001 (hitcnt=0) 0x54045ce4
  access-list internal.in line 4 extended permit udp 172.30.48.0 255.255.254.0 any eq isakmp (hitcnt=0) 0x54c7f9b9
  access-list internal.in line 4 extended permit udp 172.30.48.0 255.255.254.0 any eq 4500 (hitcnt=0) 0xaaf187a5
  access-list internal.in line 4 extended permit tcp 172.30.48.0 255.255.254.0 any eq ssh (hitcnt=0) 0x4bea78fb

 

1 Reply 1

Seb Rupik
VIP Alumni
VIP Alumni

Hi there,

From your output you can see 'line 4' repeated, this tells you that it has expanded the entries of the object-group to make their contents visible.

 

If you want to remove that subnet from the ACL, you need to remove it from object-group network secure2vpnclient .

 

cheers,

Seb.

Review Cisco Networking for a $25 gift card