ACL practices when modifying and applying new policies

Folks:

I am studying for my CCNA, and I am confused at how to manage ACL lists that are already applied to an interface.

For example: I have an ACL already applied to S0; however, I need to modify it. Cisco recommends that you disable the list first with the no ip access-group command; however, from my understanding, if I remove the list – traffic will be unfiltered. How do I modify an applied ACL and still filter traffic? Do I create another ACL to black all traffic until I modify my selected ACL?

Thank you

Find more posts tagged with

Comments

oli356

Read this

How to Edit Cisco IOS ACL's Using Line Numbers

SteveO86

Wrote this one a while back

Working with Cisco Access Control Lists / ACLs. | CCIE or Null!

You can enter ACL-Config mode and add/remove as needed by using the sequence numbers assigned to every ACL entry

jaz0nj4ckal

Tahnks for the quick turn around everyone

rob42

** bump **

Some good reading here for anyone learning about ACLs