Configuring Comments In An Extended Acl - Cisco 4700M Configuration Manual

Configuring ACLs

Configuring Comments in an Extended ACL

Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
1-16
For example, to allow an external host with IP address 192.168.12.5 to ping a host
behind the ACE with an IP address of 10.0.0.5, enter:
host1/Admin(config)# access-list INBOUND extended permit icmp host
192.168.12.5 host 10.0.0.5 echo code eq 0
For example, to remove an entry from an ICMP ACL, enter:
host1/Admin(config)# no access-list INBOUND extended permit icmp host
192.168.12.5 echo
You can add comments about an extended ACL to clarify the function of the ACL.
To add a comment to an ACL, use the access-list name remark command in
configuration mode. You can enter only one comment per ACL and the comment
always appears at the beginning of the ACL. The syntax of this command is as
follows:
access-list name remark text
The keywords and arguments are as follows:
name—Unique identifier of the ACL. Enter an unquoted text string with a
•
maximum of 64 alphanumeric characters.
remark text—Specifies any comments that you want to include about the
•
ACL. Comments appear at the top of the ACL. Enter an unquoted text string
with a maximum of 100 alphanumeric characters. You can enter leading
spaces at the beginning of the text. Trailing spaces are ignored.
For example, enter:
host1/Admin(config)# access-list INBOUND remark This is a remark
For example, to remove entry comments from an ACL, enter:
host1/Admin(config)# no access-list INBOUND line 200 remark
If you delete an ACL using the no access-list name command, then all the remarks
are also removed.
Chapter 1 Configuring Security Access Control Lists
OL-16202-01