Access-list question

[ppaik]

I noticed on the PIX firewall, when you type a rule for the firewall, you have an option to type in "line" # to insert your firewall rule. I don't see it on the 6500 firewall and was wondering how would you prioritze a rule if it needed to be done.

Thanks in advance.

 

[Boscoh]

In all the IOS versions I've used, you cant use the "access-list <name> line <#>" command to insert an entry into an ACL. You have to remove and rewrite the entire ACL. This is a function that should be implemented in IOS...but it's not in all the versions I've used.

 

[ppaik]

yeah i was afraid of that when i wrote in...

but then after numerous things, i tried using the java interface https://ip address and was able to insert and remove the rules there

i wish they had an ios command like they did in the ios with the pix firewalls with the "line #" on there...oh well i hope this helps anyone who runs into this problem