Automatically delete access-list

[Daniel_Jara]

Good day,

I would like to know how to automatically delete an access-list if certain interface state goes down and create it again if the interface state goes back up.

[balaji.bandi · Accepted solution]

You can use EEM Script for this, check the syslog and remove Access-list and create one based on your requirement.

basic EEM Script 

https://community.cisco.com/t5/networking-documents/cisco-eem-basic-overview-and-sample-configurations/ta-p/3148479

#track 1 interface FastEthernet 0/0 line-protocol

The above line is not related to EEM commands, it just a track command.

event manager applet if-down
event track 1 state down
action 1.0 cli command “enable”
action 1.1 cli command “config t”
action 1.2 cli command “no ip access-list 10”
action 1.3 cli command “end”

[Daniel_Jara]

Thanks lot!!!