Add ACL entries

21122012

Hello, I am tying to add 2 entries in a specific ACL in multiple switches.

My plan is to copy the ACL, delete it and recreated with the new entries in the end.

Of course I want to do this with a script (or some kind of automation), but there are 2 issues:

- The ACL in spite it has the same name, the content is different for every switch,

- I haven't found yet a command or a workaround on how to copy a specific ACL from the configuration

I don't know if the above scenario is even possible, so if you have any hint or comment please let me know.

Find more posts tagged with

acl

ncm

Accepted answers

deverts

To my knowledge importing the current ACL, modifying it, and pushing it back out is not possible through an automated means. You can do this manually, but depending on how many switches, that could be quite a task.

Are you putting the new entries at the end of the existing ACL? If so, just add them...the script will be simple.

(assuming Cisco)

conf t

ip access-list <blah>

permit ....

end

copy r s

This should add lines to the end of the ACL without replacing/modifying the existing. If you intend to resequence the ACL, that's a different script (Reader Tip - Resequence Entries in an A... - Cisco Community ).

All comments

deverts

Are you putting the new entries at the end of the existing ACL? If so, just add them...the script will be simple.

(assuming Cisco)

conf t

ip access-list <blah>

permit ....

end

copy r s

21122012

Thanks for the fast reply, you are right, there are a lot of switches, so yes this is quite a task.

Let's say that I am putting the new entries in the end in Cisco switches.

The problem is that I have a "deny ip any any log" in the end, so the new entries are placed after this.

21122012

UPDATE: it works, in the script I added "no deny ip any any log", then the new entries, and then "deny ip any any log".
So simple... Thanks deverts