Purpose
Command or Action
switch(config)# line vty
switch(config-line)#
Restricts incoming or outgoing connections to and from all
VTY lines using the specified ACL. The maximum length
for the
name
argument is 64 characters.
{
ip
|
ipv6
}
access-class name
{
in
|
out
}
Example:
switch(config-line)# ip access-class vtyacl out
Step 6
Displays the configured ACLs, including any VTY ACLs.
(Optional)
show
{
ip
|
ipv6
}
access-lists
Example:
Step 7
switch# show ip access-lists
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 8
switch# copy running-config startup-config
Changing Sequence Numbers in an IP ACL
You can change all the sequence numbers assigned to the rules in an IP ACL.
Before you begin
We recommend that you perform ACL configuration using the Session Manager. This feature allows you to
verify ACL configuration and confirm that the resources required by the configuration are available prior to
committing them to the running configuration. This feature is especially useful for ACLs that include more
than about 1000 rules.
SUMMARY STEPS
1.
configure terminal
2.
resequence
{
ip
|
ipv6
}
access-list name starting-sequence-number increment
3.
(Optional)
show ip access-lists name
4.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Assigns sequence numbers to the rules contained in the
ACL, where the first rule receives the starting sequence
resequence
{
ip
|
ipv6
}
access-list name
starting-sequence-number increment
Step 2
number that you specify. Each subsequent rule receives a
Example:
number larger than the preceding rule. The difference in
switch(config)# resequence access-list ip acl-01
100 10
numbers is determined by the increment that you specify.
The
starting-sequence-number
argument and the
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
238
Configuring IP ACLs
Changing Sequence Numbers in an IP ACL
