This is a short memo for ACL management with the Foundry Bigiron switches

• Login using ssh/telnet

• Enter to configuration mode

> enable
> configure terminal

• Enter the acces control list to update

> ip access-list extended incoming-from-outside

Now we select which ACL we want to update, in this example, we want to change rules in the ACL named “incoming-from-outside”. This ACL was created in earlier occasions when setting up the switch for the first time.

• Display the list of rules and their numbers.

> show access-list name iincoming-from-outsid

• Adding a rule

> insert 65 permit udp any host xx.xx.xx.xx eq Kerberos

Here we added a new rule and numbered it 65. This rule allows any host to exchange Kerberos packets (port 88) with the host xx.xx.xx.xx

• Deleting a rule

> delete 61

61 is the rule number

• Save the changes and exit

> write memory
> exit