Numbered acls: deleting a comment, Named acls: adding a comment to a new acl – Brocade BigIron RX Series Configuration Guide User Manual
Page 708
630
BigIron RX Series Configuration Guide
53-1002484-04
Modifying ACLs
22
Simply entering access-list <acl-num> remark <comment-text> adds a remark to the next ACL
entry you create.
The remark <comment-text> adds a comment to the ACL entry. The remark can have up to 255
characters. The comment must be entered separately from the actual ACL entry; that is, you cannot
enter the ACL entry and the ACL comment with the same command. Also, in order for the remark to
be displayed correctly in the output of show commands, the comment must be entered
immediately before the ACL entry it describes.
NOTE
An ACL remark is attached to each individual filter only, not to the entire ACL.
Complete the syntax by specifying any options you want for the ACL entry. Options you can use to
configure standard or extended numbered ACLs are discussed in
Numbered ACLs: deleting a comment
To delete a remark from a numbered ACL, re-enter the remark command without any remark. For
example if the remarks "Permit all users" has been defined for ACL 99, remove the remark by
entering the following command.
BigIron RX(config)# access-list 99 remark test123
Syntax: [no] access-list <number> remark <ASCII string>
Named ACLs: adding a comment to a new ACL
You can add a comment to an ACL by doing the following.
1. Use the show access-list command to display the contents of the ACL. For example, you may
have an ACL named "entry" and a show access-list command shows that it has only one entry.
BigIron RX(config)# show access-list name entry
Standard IP access-list 99
deny host 1.2.4.5
2. Add a new entry with a remark to this named ACL by entering commands such as the following.
BigIron RX(config)#ip access-list standard entry
BigIron RX(config-std-nacl)#remark Deny traffic from Marketing
BigIron RX(config-std-nacl)# deny 5.6.7.8
3. Enter a show access-list command to display the new ACL entry with its remark.
BigIron RX(config)#show access-list name entry
Standard IP access-list entry
deny host 1.2.4.5
permit host 5.6.7.8
ACL remark: Deny traffic from Marketing
Syntax: ip access-list [extended | logging-age | standard] <acl-name> <acl number> [no] remark
<string> deny <options> | permit <options>
•
extended | logging-age | standard parameter indicates the ACL type and logging timer setting
in minutes. For more information about the logging-age parameter, refer to