Cisco ip access-list序号重排方法

funnycoffee1232026-08-02 10:44

命令：

bash 复制代码

ip access-list resequence Worker 50 10

-------------- 示例

交换机Catalyst 9300

版本： 17.0

当前ACL序号如下：

bash 复制代码

Cisco9300#sh ip access-lists Worker
Extended IP access list Worker
    1 permit ip host 1.1.1.1 host 10.248.1.1
    2 permit ip host 1.1.1.2 host 10.248.1.1
    3 permit ip host 1.1.1.3 host 10.248.1.1
    4 permit ip host 1.1.1.4 host 10.248.1.1
    5 permit ip host 1.1.1.5 host 10.248.1.1
    6 permit ip host 1.1.1.6 host 10.248.1.1

如果要在第2条前面插入1条，但是会报错， 2已经存在

bash 复制代码

Cisco9300(config)# ip access-list extended Worker
Cisco9300(config-ext-nacl)#2 permit ip host 2.2.2.2 host 10.248.1.1
% Duplicate sequence number
% Failed to add ace to access-list

下面进行排序

编号从50开始，步长为10

bash 复制代码

Cisco9300(config)#ip access-list resequence Worker 50 10

排序后结果

bash 复制代码

Cisco9300(config)#do sh ip access-list Worker
Extended IP access list Worker
    50 permit ip host 1.1.1.1 host 10.248.1.1
    60 permit ip host 1.1.1.2 host 10.248.1.1
    70 permit ip host 1.1.1.3 host 10.248.1.1
    80 permit ip host 1.1.1.4 host 10.248.1.1
    90 permit ip host 1.1.1.5 host 10.248.1.1
    100 permit ip host 1.1.1.6 host 10.248.1.1