Back in the day, I didn’t have any white hairs, you could get a bag of potato chips for a quarter, kids didn’t behave badly, and numbered access-lists were all you had to work with in IOS.
If you still have numbered access-lists in your network (and I’ll bet you do), you probably hate working with them. After all, as I mentioned in my post on
Active BGP Sessions, trying to remove a single line from a numbered ACL is not possible – you end up deleting the whole list!
Well actually that’s not
quite true. Let’s find out why.
You’re troubleshooting a routing problem; you check BGP and the neighbor shows as active. Great, let’s move on and look somewhere else.
Right now a good proportion of you should be shouting at your screen – and with good reason.
Re: AS-Path Access-lists
May we please have
named as-path access lists in IOS? I’m really bored of my self-documenting configurations being effectively obfuscated by these ugly numbers I have to use in match statements.
I know you saw the light and
allowed this in NX-OS, but don’t forget us poor old retro IOS users please. You might also consider adding some consistency between the configuration of these lists: ip as-path access-list 1 permit ^$
… and the monitoring:
show ip as-path-access-list
I can never recall whether to use the extra hyphens (dashes) or not. Of course, on this particular matter, NX-OS users have their own hell to contend with:
show ip as-path list <name>
Do we have a deal? Great!
P.S. If you added them and I just missed that somehow, just let me know and I’ll send flowers or ritually sacrifice an SRX or something.
Posted in Cisco, Networking, Ramblings |
Tagged access-list, as-path, as-path-access-list, cisco, command, ios, nx-os, nxos, syntax |
Image courtesy of Ambro /
Here’s a quick test of your psychic troubleshooting skills. I’ll give you a real life scenario, and you try to figure out what’s wrong.
Sound like fun? Go on, give it a shot.
What does it actually mean to have passed the Cisco Certified Internetwork Expert exam and get those ‘digits’ (your CCIE number)?
Fame, glory, and billions of dollars await! Well…