Modifying an ACL
Context
To modify ACL rules, you can delete some rules and add rules as required. It is not recommended that existing rules be directly modified. This is because if rules after modification conflict with other rules, new ones will replace existing ones. In this manner, the ACL rules may fail to achieve the expected effect.
Procedure
- Run system-view
The system view is displayed.
- Run acl acl-number or acl name acl-name
The ACL view is displayed.
- Based on the ACL type, configure new rules and delete unnecessary rules.
When you update ACL rules, the device delivers the old and new rules together, and then deletes the old rules. Therefore, sufficient ACL resources are required on the device for successful rule update. For example, if three rules are configured in ACL3001, to add another rule, ensure that there are at least four ACL resources available.