Cisco ASA Remove Access-List

Lessons Discussion
6

Hi Hoan,

If you want to remove a single statement, you can do it like this:

ASA1# show run access-list 
access-list MY_ACL extended permit ip any host 192.168.1.1 
access-list MY_ACL extended permit ip any host 192.168.1.2 
access-list MY_ACL extended permit ip any host 192.168.1.3

Let’s remove the middle statement:

ASA1(config)# no access-list MY_ACL extended permit ip any host 192.168.1.2

And verify our work:

ASA1# show run access-list                                         
access-list MY_ACL extended permit ip any host 192.168.1.1 
access-list MY_ACL extended permit ip any host 192.168.1.3

That’s it.

Rene