In the second ACE shown in the following example, port 400 was incorrectly specified instead of port 443. What is the best way to correct this error?
R1# show access-lists
Extended IP access list SURFING
10 permit tcp 192.168.10.0 0.0.0.255 any eq
www
20 permit tcp 192.168.10.0 0.0.0.255 any eq
400
R1#- Copy the ACL into a text editor, correct the ACE, and recopy the ACE to the router.
- Create a new named ACL and apply it to the router interface.
- Enter permit tcp 192.168.10.0 0.0.0.255 any eq 443.
- Enter the no 20 keyword, and then enter permit tcp 192.168.10.0 0.0.0.255 any eq 443.
- Remove the entire ACL and then re-create it with the correct ACE.
Explanation: You can use the ip access-list command to edit an existing numbered or named ACL. The ACL ACEs can be removed using the no command followed by the sequence number.
Related exam: 5.5.4 Module Quiz - ACLs for IPv4 Configuration
