Router ACL with external file reference

[promise kumalo]

Does anyone know a way of creating a router access list  that references an external file sitting on a server, perhaps a text file with a bunch of IP's. The goal is to modify the file to add/remove IP's without touching/logging into the router

[balaji.bandi]

Now sure what you mean by the server, but you can  use TFTP: check below : (to get an idea, is this what you looking to do ?)

https://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-2mt/sec-acl-ov-gdl.html

[Georg Pauwen]

Hello,

if you don't want to access the router at all, I think the best you can do is this:

1. Change the router's configuration in a text file, and save that text file to a TFTP server that is hosted on the external server.

2. Have the router pull that text file periodically from the TFTP server and save it as 'startup-config' locally.

3. Use an EEM script to periodically compare the startup to the running configuration. If there is a change the a specific access list, the EEM script then copies the startup to the running configuration.

4. The disadvantage is that the changes to the access list are not applied immediately, but only after the configured time interval in which the EEM script compares the running to the startup config.

If that is something that sounds feasible, I can work this out and send you the config file.