Cisco ASA Remove Access-List

Lessons Discussion
1

This topic is to discuss the following lesson:

3

Where is the command ?

4

Which one are you looking for?

clear configure access-list MY_ACL is to get rid of the access-list.

5

Hi Rene

your command will remove all MY_ACL
what if I want to remove only one access list 192.168.1.2 and keep the other two?
please show how

Thank you

6

Hi Hoan,

If you want to remove a single statement, you can do it like this:

ASA1# show run access-list 
access-list MY_ACL extended permit ip any host 192.168.1.1 
access-list MY_ACL extended permit ip any host 192.168.1.2 
access-list MY_ACL extended permit ip any host 192.168.1.3

Let’s remove the middle statement:

ASA1(config)# no access-list MY_ACL extended permit ip any host 192.168.1.2

And verify our work:

ASA1# show run access-list                                         
access-list MY_ACL extended permit ip any host 192.168.1.1 
access-list MY_ACL extended permit ip any host 192.168.1.3

That’s it.

Rene

7

How would you do this in ASDM?

8

Hello Lloyd

You can see how to do this in the following Cisco documentation:

Note that the intent of the lesson is to show how the CLI differs from the more conventional IOS commands that we are used to. The ASDM method uses a GUI so there are no special configuration parameters there.

I hope this has been helpful!

Laz