cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2616
Views
4
Helpful
18
Replies

why I am not able to paste Ip access-list containg 10+ lines

MasoodA
Level 1
Level 1

Hi,

 

I know I had done this many times in the past but I was trying to paste an

access-list

(standard) into a 3800 L3 switch from a notpad file but the device kept rejecting it. I had to insert line by line (about 12 lines).

 

I had done this on Cisco routers many times with no issues but this switch gave me hard times. could someone please shed light on this so I know why that happened?

Ip access-list 30

a standard Ip access-list.

I prepared it in notepad because i wanted to add three new lines.

 

No access-list 30

then conf t and pasted new

access-list

but switch kept rejecting until I inserted line by line. it was working as expected after adding line by line as I was seeing IPs getting hits.

Thank you and

best regards,

 

Masood

 

 

 

18 Replies 18

First I confuse about 10 lines I assume SW reject more than 10 line

Anyway

https://community.cisco.com/t5/switching/

access-list-v-s-ip-access-list/td-p/1905219

There is different between

access-list and ip access list

 

Ip access list

need to specify standard or extended acl.

Here is the issue 

Before as you mention you was success because you was use

access list

 

Here you use

 ip access-list

without keyword standard and complete all acl is rejected from SW not only two last lines.

Thanks 

MHM

Hi,

I believe I did not use standard initially. Yes.

Regards,

Masood

You are so welcome.

Have a nice day 

MHM

Hello @MasoodA ,

you have actually created a named standard ACL with name = 30 , when you do this the following lines are in ACL mode and do not need to start with

access-list 30

To create a classic numbered standard acl you use commands like

ip access-list 30 permit host <A>

ip access-list 30 permit host <B>

and so on and in this case all the commands are in global config and you need to have

ip access-list 30 

in each line

 

Hope to help

Giuseppe