Creating ACLs offline

[Lee Bailey_1]

Hello,

I'm new to creating ACLs :-)

I have the following in a text file called test.txt that I am trying to tftp to a HP5406 router:

ip access-list extended "test"
10 remark "test remark"
10 permit tcp 150.237.128.0 0.0.0.255 150.237.196.0 0.0.0.127
exit

I get the following when I tftp the file to the router which indicates a problem with the remark command. If I manually create the same list on the switch it works fine. Any ideas or suggestions?

Many thanks, Lee.

Foss_CRoom_Left_HP5406/1# copy tftp command 150.237.128.7 test.txt
Running configuration may change, do you want to continue [y/n]? y
1.
2. ip access-list extended "test"
3. 10 remark "test remark"
Command files are limited to access-list commands.
4. 10 permit tcp 150.237.128.0 0.0.0.255 150.237.196.0 0.0.0.127
5. exit
6.
Foss_CRoom_Left_HP5406/1#

P.S. This thread has been moved from Switches, Hubs, Modems (Legacy ITRC forum) to ProCurve / ProVision-Based. - Hp Forum Moderator

[cenk sasmaztin]

hi Lee please read your below link.

cenk

http://www.ubookcase.com/book/Cisco/Cisco.Router.Firewall.Security/index.html?page=source/1587051753/ch07lev1sec2.html

[Lee Bailey_1]

Hi Cenk,

I think I may be missing the point from your reply. Have I got the syntax wrong on the remark statement? The Cisco article seems to be saying that where remarks were constructed using "!", the remarks were ignored by the Cisco IOS and what admins should be using is the "remark" command.

Thanks, Lee.

[cenk sasmaztin]

hi Lee

please send me test.txt file

cenk

[Holger Hasenaug · Accepted solution]

Hi,

please take the following fix in mind to be sure you test with a good version:

K.13.04:
TFTP/ACL (PR_1000771560) â The copy tftp command-file command rejects ACL remarks
if they do not contain the keywords permit or deny.

[Lee Bailey_1]

Thank you!

I'll check the current code on Monday.

Regards, Lee.

[Lee Bailey_1]

Thank you! I've upgraded the code level and that has fixed the issue.

Regards, Lee.

[Lee Bailey_1]

As above.