Determining The Ace Order - Nortel 2360 Configuration Manual

418 Configuring and managing security ACLs

Determining the ACE order

The set security acl command creates a new entry in the edit buffer and appends the new entry as a rule at the end of an
ACL, unless you specify otherwise. The order of ACEs is significant, because the earliest ACE takes precedence over
later ACEs. To place the ACEs in the correct order, use the parameters before editbuffer-index and modify edit-
buffer-index. The first ACE is number 1.
To specify the order of the commands, use the following parameters:
• before editbuffer-index inserts an ACE before a specific location.
• modify editbuffer-index changes an existing ACE.
If the security ACL you specify when creating an ACE does not exist when you enter set security acl ip, the specified
ACL is created in the edit buffer. If the ACL exists but is not in the edit buffer, the ACL reverts, or is rolled back, to the
state when its last ACE was committed, but it now includes the new ACE.
For details, see "Placing one ACE before another" (page 428)
NN47250-500 (320657-F Version 02.01)
and "Modifying an existing security ACL" (page 429).