Adding A Comment To An Entry In A Named Acl; Deleting A Comment From An Acl Entry; Viewing Comments In An Acl - Dell PowerConnect B-FCXs Configuration Manual

16
Managing ACL comment text
The <comment-text> can be up to 128 characters in length. The comment must be entered
separately from the actual ACL entry; that is, you cannot enter the ACL entry and the ACL comment
with the same access-list or ip access-list command. Also, in order for the remark to be displayed
correctly in the output of show commands, the comment must be entered immediately before the
ACL entry it describes. Note that an ACL comment is tied to the ACL entry immediately following the
comment. Therefore, if the ACL entry is removed, the ACL comment is also removed.
The standard | extended parameter indicates the ACL type.

Adding a comment to an entry in a named ACL

To add comments to entries in a named ACL, enter commands such as the following.
PowerConnect(config)#ip access-list extended TCP/UDP
PowerConnect(config-ext-nACL)#remark The following line permits TCP packets
PowerConnect(config-ext-nACL)#permit tcp 192.168.4.40/24 2.2.2.2/24
PowerConnect(config-ext-nACL)#remark The following permits UDP packets
PowerConnect(config-ext-nACL)#permit udp 192.168.2.52/24 2.2.2.2/24
PowerConnect(config-ext-nACL)#deny ip any any
Syntax: [no] access-list standard | extended <ACL-name>
Syntax: remark <comment-text>
The standard | extended parameter indicates the ACL type.
For <ACL-name>, enter the name of the ACL.
The <comment-text> can be up to 128 characters in length. The comment must be entered
separately from the actual ACL entry; that is, you cannot enter the ACL entry and the ACL comment
with the same ip access-list command. Also, in order for the remark to be displayed correctly in the
output of show commands, the comment must be entered immediately before the ACL entry it
describes. Note that an ACL comment is tied to the ACL entry immediately following the comment.
Therefore, if the ACL entry is removed, the ACL comment is also removed.

Deleting a comment from an ACL entry

To delete a comment from an ACL entry, enter commands such as the following.
PowerConnect(config)#ip access-list standard 99
PowerConnect(config)#no remark The following line permits TCP packets
Syntax: no remark <comment-text>

Viewing comments in an ACL

You can use the following commands to display comments for ACL entries:
•
•
•
The following shows the comment text for a numbered ACL, ACL 100, in a show running-config
display.
568
show running-config
show access-list
show ip access-list
PowerConnect B-Series FCX Configuration Guide
53-1002266-01