How do I add a line into an access control list?

We have a user VLAN that allows connectivity to printer VLAN. Printers connect and need snmp to communicate.
New printers were brought in, and they need port 443 opened. I was under the impression I could insert a line into an ACL(below).
I have copied the production ACL to this test ACL (102) and it works fine when I changed the VLAN interface to use this ACL. I copied and pasted, however, and the new ACL was easy to create and apply. Since I have 30 more production switches to do this to, I was hoping I would not have to delete this ACL and recreate it. I thought there was a way to "inject" a line into an ACL
Any thoughts?
access-list 102 permit udp any any eq bootps
access-list 102 permit udp any any eq bootpc
access-list 102 permit icmp 10.0.32.0 0.255.3.255 10.0.32.1 0.255.0.0 echo
access-list 102 permit icmp 10.0.32.0 0.255.3.255 10.0.32.1 0.255.0.0 echo-reply
access-list 102 permit icmp 10.0.32.1 0.255.0.0 10.0.32.0 0.255.3.255 echo
access-list 102 permit icmp 10.0.32.1 0.255.0.0 10.0.32.0 0.255.3.255 echo-reply
access-list 102 permit icmp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 echo
access-list 102 permit icmp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 echo-reply
access-list 102 permit tcp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq 443
access-list 102 permit udp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq snmp
access-list 102 permit tcp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq 161
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.32.0 0.255.3.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.64.0 0.255.0.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 log
access-list 102 permit ip host 10.105.34.9 10.0.112.0 0.255.0.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.112.0 0.255.0.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.114.0 0.255.0.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.161.0 0.255.0.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.165.0 0.255.0.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.235.0 0.255.0.255 log
access-list 102 permit ip 10.0.32.0 0.255.3.255 10.0.240.24 0.255.0.0
access-list 102 permit ip 10.0.32.0 0.255.3.255 10.2.240.0 0.0.1.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.240.0 0.255.0.255 log
access-list 102 deny   ip 10.0.32.0 0.255.3.255 10.0.241.0 0.255.0.255 log
access-list 102 permit ip any any

Use show ip-access lists to see the numbering:
R1#sh ip access-lists
Extended IP access list 102
    10 permit udp any any eq bootps
    20 permit udp any any eq bootpc
    30 permit icmp 10.0.32.0 0.255.3.255 10.0.32.1 0.255.0.0 echo
    40 permit icmp 10.0.32.0 0.255.3.255 10.0.32.1 0.255.0.0 echo-reply
    50 permit icmp 10.0.32.1 0.255.0.0 10.0.32.0 0.255.3.255 echo
    60 permit icmp 10.0.32.1 0.255.0.0 10.0.32.0 0.255.3.255 echo-reply
    70 permit icmp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 echo
    80 permit icmp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 echo-reply
    90 permit tcp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq 443
    100 permit udp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq snmp
    110 permit tcp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq 161
    120 deny ip 10.0.32.0 0.255.3.255 10.0.32.0 0.255.3.255 log
    130 deny ip 10.0.32.0 0.255.3.255 10.0.64.0 0.255.0.255 log
    140 deny ip 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 log
    150 permit ip host 10.105.34.9 10.0.112.0 0.255.0.255 log
    160 deny ip 10.0.32.0 0.255.3.255 10.0.112.0 0.255.0.255 log
    170 deny ip 10.0.32.0 0.255.3.255 10.0.114.0 0.255.0.255 log
    180 deny ip 10.0.32.0 0.255.3.255 10.0.161.0 0.255.0.255 log
    190 deny ip 10.0.32.0 0.255.3.255 10.0.165.0 0.255.0.255 log
    200 deny ip 10.0.32.0 0.255.3.255 10.0.235.0 0.255.0.255 log
    210 permit ip 10.0.32.0 0.255.3.255 10.0.240.24 0.255.0.0
    220 permit ip 10.0.32.0 0.255.3.255 10.2.240.0 0.0.1.255 log
    230 deny ip 10.0.32.0 0.255.3.255 10.0.240.0 0.255.0.255 log
    240 deny ip 10.0.32.0 0.255.3.255 10.0.241.0 0.255.0.255 log
    250 permit ip any any
Then if you want to add something at line 245:
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#ip access-list extended 102
R1(config-ext-nacl)#245 deny ip host 1.1.1.1 host 2.2.2.2
Now it should be done:
R1(config-ext-nacl)#do show ip access-lists
Extended IP access list 102
    10 permit udp any any eq bootps
    20 permit udp any any eq bootpc
    30 permit icmp 10.0.32.0 0.255.3.255 10.0.32.1 0.255.0.0 echo
    40 permit icmp 10.0.32.0 0.255.3.255 10.0.32.1 0.255.0.0 echo-reply
    50 permit icmp 10.0.32.1 0.255.0.0 10.0.32.0 0.255.3.255 echo
    60 permit icmp 10.0.32.1 0.255.0.0 10.0.32.0 0.255.3.255 echo-reply
    70 permit icmp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 echo
    80 permit icmp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 echo-reply
    90 permit tcp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq 443
    100 permit udp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq snmp
    110 permit tcp 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 eq 161
    120 deny ip 10.0.32.0 0.255.3.255 10.0.32.0 0.255.3.255 log
    130 deny ip 10.0.32.0 0.255.3.255 10.0.64.0 0.255.0.255 log
    140 deny ip 10.0.32.0 0.255.3.255 10.0.96.0 0.255.0.255 log
    150 permit ip host 10.105.34.9 10.0.112.0 0.255.0.255 log
    160 deny ip 10.0.32.0 0.255.3.255 10.0.112.0 0.255.0.255 log
    170 deny ip 10.0.32.0 0.255.3.255 10.0.114.0 0.255.0.255 log
    180 deny ip 10.0.32.0 0.255.3.255 10.0.161.0 0.255.0.255 log
    190 deny ip 10.0.32.0 0.255.3.255 10.0.165.0 0.255.0.255 log
    200 deny ip 10.0.32.0 0.255.3.255 10.0.235.0 0.255.0.255 log
    210 permit ip 10.0.32.0 0.255.3.255 10.0.240.24 0.255.0.0
    220 permit ip 10.0.32.0 0.255.3.255 10.2.240.0 0.0.1.255 log
    230 deny ip 10.0.32.0 0.255.3.255 10.0.240.0 0.255.0.255 log
    240 deny ip 10.0.32.0 0.255.3.255 10.0.241.0 0.255.0.255 log
    245 deny ip host 1.1.1.1 host 2.2.2.2
Daniel Dib
CCIE #37149
Please rate helpful posts.

Similar Messages

How can I add a line item to delivery?

Hi all,
How can I add a line item in a delivery without using BDC?
Regards!
Curtis

Hi,
I have tried
BAPI_OUTB_DELIVERY_CHANGE
and this only allows you to change existing lines not add lines.
Since its outboud delivery that I'm interested in I will not look at the inbound that you suggested.
Any other suggestions would be appreciated.
Regards!
Curtis

How can I add advertisement code into flash game?

hi mates,
just want to ask about loading advertisement code!
How do you add the advertisement code (adsense) into flash games??
my site Funny Games have over 5k games but they are getting from others sites thus I have no original files. How can I add more code into the current files?

Unless the games were pre-made to allow you to specify some variables in the page code or some external file, you won't be having any luck... you cannot add code to the games unless you have the source files, which you apparently don't have.

How do I add OIC presense into my web page?

How do I add OIC presence into my web page? with Oracle Messenger (RTC) we can use the href=rtcmsgr:sendmsg?<login_ID> what is the equivalent for Oracle Instant Chat (OIC)?

Unfortunately, this functionality was lost in the conversion from RTC to OIC. This feature was available because of a http web presence. Oracle did not license that component in OIC.

How do I add PO line item to incomplete log procedure

Hi SD Experts,
How do I add PO line item to incomplete log procedure for VA02? Is that possible through configuration and/or code? if it is done by code, what userexit or BAdI I need to implement?
Thanks,
Duy

Hi Duy,
You need to go to SD > Basic functions > log of incomplete items > define incomplete procedure > select group A (sales header) > procedures > select 11 (Sales order) > fields tab and add PO number incompletion fields as below:
table---field namedescriptionscreen--status--warning
VBKD---BSTKDPO number-KBES -
0----
X
Finally, you should assign your incompletion procedures to your sales doc. typ.
I hope these will work.
Regards,

How can i add a line separator on Dreamweaver?

Hi
How can i add a line separator on Dreamweaver?
Thanks

Do you mean a Horizontal Rule (the <hr/> tag)?
Click where you want it to appear and go to Insert > Horizontal Rule, or drag and drop from the Common heading of the Insert window.
If that's not what you're talking about, could you be a bit more descriptive as to what you are trying to accomplish?

How can I add a line but keep the number I have from tmobile

How can I add a line but keep the number I have from Tmobile

Hi, Janice!
I'm just guessing, but I imagine you'd get your question answered faster in the AE forum.

How can i add Custom fields into the

Dear Experts
We have Ecc6.0 system,
How can i add Custom fields into the Infotype Screen(PA30),i heard that we do it by PM01 Tcode.
But in PM01 i am unable to find the enhance infotype tab.
How can i do it ....pls help.....
Regards
Sajid

Hi,
Do it thru the third tab : Single Screen.
There write down the infotype number (e.g. 0022) and say generate objects.
Regards,
Dilek

How can i add my components into dcomcnfg.exe?

I have created a component a out-process Server and registered but I can't find it in
dcomcnfg.exe.
how can i add my components into dcomcnfg.exe?

chenkuan,
Sorry but you have posted to a forum that deals exclusively with questions/issues about customizing and programming Microsoft Project, a planning and scheduling application. I suggest you delete this post and find a forum appropriate for your issue.
John

MaxL script syntax: How do I add comment lines?

How do I add comment lines to MaxL scripts? REM didn't work, ' didn't work.
http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_esb_techref/maxl/ddl/utils/shell/syntax.htm

Hmm, a url delimted by "!" on either side is supposed to allow me to embed a graphic.
Apparently I am to stupid/impatient/all of the above to figure that out, so check out a code sample from my blog (I am on a roll today with references to this beast) to see what it looks like: Regards,
Cameron Lackpour

HT204655 How can I add gps information into my pictures?

How can I add gps information into my pictures?
I understand Photos doens't have this feature.
Só how could I do it with an external application. Is it possible? Can I even use iPhoto with the same library (since they share stuff) to do it?

Photos does not support to add location information yet.
Add the GPS before you import the photos to Photos. I hope this will change with the next release.
You could ,for example, first import to iPhoto, add the locations, batch change the titles and captions, do all the things that are not yet supported in the new Photos, then export the photos from iPhoto and import them to Photos.
Or use the free exiftool, if you like the Terminal.
See: http://www.sno.phy.queensu.ca/~phil/exiftool/exiftool_pod.html#geotagging_exampl es
To install exiftool: http://www.sno.phy.queensu.ca/%7Ephil/exiftool/install.html
Other convenient apps are Jetphoto Studio, Geotagalog, there are many more ..
I use Jetphoto Studio, but it is not free.

How to find the current line in the table control in module pool ?

How to find the current line in the table control in module pool ?
This is an urgent requirement? please do help me.

refer to this example
REPORT demo_dynpro_tabcont_loop_at.
CONTROLS flights TYPE TABLEVIEW USING SCREEN 100.
DATA: cols LIKE LINE OF flights-cols,
lines TYPE i.
DATA: ok_code TYPE sy-ucomm,
 save_ok TYPE sy-ucomm.
DATA: itab TYPE TABLE OF demo_conn.
 TABLES demo_conn.
SELECT * FROM spfli INTO CORRESPONDING FIELDS OF TABLE itab.
LOOP AT flights-cols INTO cols WHERE index GT 2.
cols-screen-input = '0'.
MODIFY flights-cols FROM cols INDEX sy-tabix.
ENDLOOP.
CALL SCREEN 100.
MODULE status_0100 OUTPUT.
SET PF-STATUS 'SCREEN_100'.
DESCRIBE TABLE itab LINES lines.
flights-lines = lines.
ENDMODULE.
MODULE cancel INPUT.
LEAVE PROGRAM.
ENDMODULE.
MODULE read_table_control INPUT.
MODIFY itab FROM demo_conn INDEX flights-current_line.
ENDMODULE.
MODULE user_command_0100 INPUT.
save_ok = ok_code.
CLEAR ok_code.
CASE save_ok.
 WHEN 'TOGGLE'.
 LOOP AT flights-cols INTO cols WHERE index GT 2.
 IF cols-screen-input = '0'.
 cols-screen-input = '1'.
 ELSEIF cols-screen-input = '1'.
 cols-screen-input = '0'.
 ENDIF.
MODIFY flights-cols FROM cols INDEX sy-tabix.
ENDLOOP.
 WHEN 'SORT_UP'.
 READ TABLE flights-cols INTO cols WITH KEY selected = 'X'.
 IF sy-subrc = 0.
 SORT itab STABLE BY (cols-screen-name+10) ASCENDING.
 cols-selected = ' '.
MODIFY flights-cols FROM cols INDEX sy-tabix.
 ENDIF.
 WHEN 'SORT_DOWN'.
 READ TABLE flights-cols INTO cols WITH KEY selected = 'X'.
 IF sy-subrc = 0.
 SORT itab STABLE BY (cols-screen-name+10) DESCENDING.
 cols-selected = ' '.
MODIFY flights-cols FROM cols INDEX sy-tabix.
 ENDIF.
 WHEN 'DELETE'.
 READ TABLE flights-cols INTO cols
 WITH KEY screen-input = '1'.
 IF sy-subrc = 0.
 LOOP AT itab INTO demo_conn WHERE mark = 'X'.
 DELETE itab.
ENDLOOP.
 ENDIF.
ENDCASE.
ENDMODULE.

How do I add songs to my iTunes Store wish list on my iPod?

How do I add a song to my iTunes wish list on my iPod? I keep looking up songs/albums I want to buy on my iPod Touch, but I can never add them to a wish list because I can't find the right button to push. I know the button is next to the price on the OS X iTunes Store, but it's not there on the iOS iTunes Store. Help!!!

No idea what you are asking.
You want to sell your own music on the itunes store?

How do I add songs to my 'on the go' list on my ipod classic?

How do I add songs to my 'on the go' list on my ipod classic?

Find the song you want to add, but when you click on it with the Select button, hold the click until it blinks a couple times. That will add the song to that playlist. I hope this helps! :-)

How can we delete a line from the table control .

hi all
how can we delete a line from the table control .
situation is.
created table control in se51 which will display the data of a table.
how could i select a line from the table control ?
how could i delete the selected lines form the table.
thanks in advance

Change the Table Control attributes such that user can only select a single record(row).
Tip to delete a selected record
1) write a module 'Mark' in the PAI as below
PROCESS AFTER INPUT.
MODULE cancel AT EXIT-COMMAND.
LOOP WITH CONTROL table_view.
MODULE read_table_control.
FIELD flag MODULE mark ON INPUT.
ENDLOOP.
MODULE user_command_0100.
2) Module Mark is below.
MODULE mark INPUT.
CHECK flag = 'X'.
x = table_view-top_line + sy-stepl - 1.
Delete itab INDEX x.
ENDMODULE. " mark INPUT
Table_view is the TableControl Name.
'flag' is of type char(1) available in the Internal table which was assigned to the select option in the table control.
award if uesful
Regards,
Sudheer

How do I add a line into an access control list?

Similar Messages

Maybe you are looking for