[Webinar] Streamline your web hosting managementRegister Today

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 347
  • Last Modified:

How Do I Save an ACL Before Modifing a Cisco Switch?

How Do I Save an ACL Before Modifing a Cisco Switch?  I have a model 3560.  I want to open the SMTP on a few ports for internal email routing, but first, I want to save the config and the ACL.
3 Solutions
you have to setup an tftp server and then you can send it with the command:

write net
you could also use the command:

show config

and then copy paste the output to textfile.
You should also archive switch and router configs regularly anyway.

Kiwi Cattools does this.

You just need to set up a login for the program and it will automagically archive configs and list changes on a schedule you define.
Istvan KalmarHead of IT Security Division Commented:

I advise to do the following:

sh access-list

and it shows lines with number
you able to put command for example:

sh access-lists
Extended IP access list 110
    10 permit tcp any eq 1723 any
    20 permit tcp any eq www any

conf t
ip access-list externded 110
 15  permit tcp any eq 161 any

if you don't make any other changes to the switch you can save the whole config to flash and if you want to revert back, use the  to that config. So:

save the config to flash:
Switch1#copy run flash          
Destination filename [running-config]?

4929 bytes copied in 0.990 secs (4979 bytes/sec)
then change your acl

if you want to revert back:
Switch1#config replace flash:/running-config
This will apply all necessary additions and deletions
to replace the current running configuration with the
contents of the specified configuration file, which is
assumed to be a complete configuration, not a partial
configuration. Enter Y if you are sure you want to proceed. ? [no]: y
Total number of passes: 0
Rollback Done

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now