Access List clarification

[cisconooblet]

Ok....need some help. I cant test this because I dont have ios 12.3 or later

> or = to 12.3 ios can you have an access list such as:

access-list 101 permit tcp any any eq 80
access-list 101 permit ip any any

and then do a:

no access-list 101 permit tcp any any eq 80

without deleting the whole ip access list? (In global config mode)

Reason is....the book seems (cisco press) to say I can with the release of 12.3 or bettter....however the testing software that comes with it....says you cannot. However I have found a few questions that were wrong with the testing software and am thinking this is one of them. Any help?

[kryolla]

Rack1R3(config)#do sh access-lis
Extended IP access list 101
10 permit tcp any any eq www
20 permit ip any any
Rack1R3(config)#ip access-list extended 101
Rack1R3(config-ext-nacl)#no 10
Rack1R3(config-ext-nacl)#5 permit tcp any any eq 80
Rack1R3(config-ext-nacl)#do sh access-list
Extended IP access list 101
5 permit tcp any any eq www
20 permit ip any any
Rack1R3(config-ext-nacl)#

[cisconooblet]

Thanks for the help kryolla, but thats not what I meant. Your in the access list config mode. I'm trying to find out if you can delete a line from the access list from global config mode without deleting the whole access list. With the command listed above.

[cisconooblet]

Basically will this command:


no access-list 101 permit tcp any any eq 80


delete the whole access list after version 12.3 ios.

[blackninja]

Originally Posted by cisconooblet

Basically will this command:


no access-list 101 permit tcp any any eq 80


delete the whole access list after version 12.3 ios.

It will delete the whole access list

The only way to delete line by line is the way kryolla states

Edit: IOS 12.4

Extended IP access list 101
10 permit tcp any any eq www
20 permit ip any any
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#no access-list 101 permit tcp any any eq 80
Router(config)#do sh ip access

Router(config)#

[cisconooblet]

Thank you black ninja and kryolla!