Re: [nsp] Including an access-list into another access-list...

From: dan hopkins (hop@nexthop.net)
Date: Sun Aug 19 2001 - 10:29:22 EDT


as far as i have seen you are limited to the use of:

copy runn tftp://tftpserver.company.com/router.config
...

grep 'list $OLD_LIST' router.config > old.list

sed s/list\ $OLD_LIST/list\ $NEW_LIST/ old.list > new.list

[other acl munging here]

copy tftp runn

or some other utility that performs the same.

i will always build ACLs offline until cisco includes vi in IOS

-hop

dan hopkins hop@nexthop.net
never underestimate the bandwidth of a station wagon
full of magnetic tapes hurtling down the interstate.

on 2001-08-19 09:54 +0300, Elijah Kagan <elijah@netvision.net.il> wrote:

> I am sure that the answer to my question is negative, but I am going to
> try anyway....
>
> Is there a way to include an access-list into another access-list?
> For example, this could be very helpful:
>
> access-list 123 include access-list 150
> access-list 123 deny 10.0.0.0 0.255.255.255 any
> access-list 123 permit ip any any
>
> access-list 150 deny host 12.34.56.78 any
> access-list 150 deny host 1.2.3.4 any
> access-list 150 deny host 5.6.7.8 any
>
>
> -- elijah
>
>



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:49 EDT