Re: Access-lists question??

2000-06-28 Thread John Nemeth
On Nov 5, 11:41am, "Johnny Dedon" wrote: } } Guys, be very careful with advice on access-list on production routers. The } best practice for adding or changing access-list is to remove it from the } interface before modifying it. The implicit deny all can be a real disaster } with typos and the

Re: Access-lists question??

2000-06-16 Thread DIck Beamish
How about named access lists? "Palikhey, Niraj" wrote: Hi, I am trying to understand something with access-lists. They say that when you put in a new entry to an existing access-list, it will be written at the end of the existing list. So If I have a deny any any at the end of the list and

RE: Access-lists question??

2000-06-16 Thread Palikhey, Niraj
'; [EMAIL PROTECTED] Subject: Re: Access-lists question?? Guys, be very careful with advice on access-list on production routers. The best practice for adding or changing access-list is to remove it from the interface before modifying it. The implicit deny all can be a real disaster with typos

RE: Access-lists question??

2000-06-15 Thread Swart, Douwe
Use a terminal emulator (I know Procomm Plus does this) and cut the access list. Put it to notepad and edit the list just the way that you want it in the correct order. You will need to prepend to this list the correct access list command and access list number that you want to use. Then paste

Re: Access-lists question??

2000-06-15 Thread Johnny Dedon
to remove the old access-list with a no access-list # before pasteing back the new one. Johnny - Original Message - From: "Swart, Douwe" [EMAIL PROTECTED] To: "'Palikhey, Niraj'" [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Thursday, June 15, 2000 4:43 PM Subject: RE: A

Re: Access-lists question??

2000-06-15 Thread Jeff Kell
"Swart, Douwe" wrote: Use a terminal emulator (I know Procomm Plus does this) and cut the access list. Put it to notepad and edit the list just the way that you want it in the correct order. You will need to prepend a 'no access-list xxx' or 'no ip access-list extended xyzzy' (or