cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
391
Views
0
Helpful
1
Replies

Access-list in 2924- and 3524-switches

maraz
Level 1
Level 1

Hello,

When applying an access-list like this:

access-list 11 remark TEST

access-list 11 permit 10.10.10.1

access-list 11 permit 10.10.10.2

access-list 11 permit 10.10.10.3

access-list 11 permit 10.10.10.4

access-list 11 permit 10.10.11.0 0.0.0.255

access-list 11 permit 10.10.12.0 0.0.0.255

access-list 11 permit 10.10.13.0 0.0.0.255

access-list 11 permit 10.10.14.0 0.0.0.255

access-list 11 permit 10.10.15.0 0.0.0.255

access-list 11 permit 10.10.16.0 0.0.0.255

The output in the config shows:

access-list 11 permit 10.10.10.1

access-list 11 permit 10.10.10.2

access-list 11 remark TEST

access-list 11 permit 10.10.10.3

access-list 11 permit 10.10.10.4

access-list 11 permit 10.10.11.0 0.0.0.255

access-list 11 permit 10.10.12.0 0.0.0.255

access-list 11 permit 10.10.13.0 0.0.0.255

access-list 11 permit 10.10.14.0 0.0.0.255

access-list 11 permit 10.10.15.0 0.0.0.255

access-list 11 permit 10.10.16.0 0.0.0.255

The remark jumps down to the second or third row. In the 2950 the problem is solved with named access-list, ip access-list standard TEST. But you can not configure named access-list on the 2924 or 3524 switches. Is this something Cisco will bother to correct? There are a lot of companies still running those switches and the fault in not only cosmetic because you simply want your remark on the right spot. Especially if you have several remarks.

Best Regards

Robert Maras

1 Reply 1

maraz
Level 1
Level 1

More information on the case: The problem expands to the 2950-switches (and other series?) because you can not attach a named access-list to the "ip http-access-class" or the "snmp-server community BLABLA ro". So now the problem is on both the "older" switches and the newer switches.

Review Cisco Networking for a $25 gift card