I have a Cisco Router 1941 Series and I want to make some changes to the access-list on the router. I got to know I will have to delete one of the list and then re-add everything again with my additional ones included while stating the deny ones at the end of it. On removing, it went well but on adding, it hangs after the first statement. And whenever I try pasting the code at once, it hangs too.
I tried copying the file to tftp, make some edits and then bring it back, I got some errors with the certificate signing side of it making some complaints.. How can I solve the problem with the ACL?
At the present, this is what I have,
interface GigabitEthernet0/0 description ### WAN INTERFACE ### ip address xxx.xxx.xxx.xxx 255.xxx.xxx.xxx ip flow ingress ip nat outside ip virtual-reassembly duplex full speed 100 no cdp enable ! interface GigabitEthernet0/1 description ### LAN INTERFACE ### no ip address ip flow ingress ip virtual-reassembly duplex auto speed auto ! interface GigabitEthernet0/1.1 description ### 1st FLR NETWORK ### encapsulation dot1Q 1 native ip address 192.168.1.1 255.255.255.0 ip access-group 110 in ip accounting output-packets ip flow ingress ip nat inside ip virtual-reassembly ! interface GigabitEthernet0/1.2 description ### GROUND FLR NETWORK ### encapsulation dot1Q 2 ip address 192.168.2.1 255.255.255.0 ip access-group 110 in ip accounting output-packets ip flow ingress ip nat inside ip virtual-reassembly ! ip forward-protocol nd ! ip http server ip http access-class 23 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip flow-export source GigabitEthernet0/1 ip flow-export version 9 ip flow-export destination 192.168.1.120 9996 ip flow-top-talkers top 10 sort-by bytes ! ip nat source static 192.168.1.19 interface Loopback100 ip nat inside source list NAT interface GigabitEthernet0/0 overload ip route 0.0.0.0 0.0.0.0 xxx.vvv.vvv.vvv ! ip access-list standard NAT permit 192.168.1.0 0.0.0.255 permit 192.168.2.0 0.0.0.255 ! access-list 110 permit ip 192.168.1.0 0.0.0.255 host 192.168.2.44 access-list 110 permit ip host 192.168.2.44 192.168.1.0 0.0.0.255 access-list 110 permit ip 192.168.2.0 0.0.0.255 host 192.168.1.18 access-list 110 permit ip host 192.168.1.18 192.168.2.0 0.0.0.255 access-list 110 deny ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255 access-list 110 permit udp any any access-list 110 permit ip any any
And I would like to add additional ones to it... like this...
access-list 110 permit ip 192.168.2.0 0.0.0.255 host 192.168.1.120 access-list 110 permit ip host 192.168.1.120 192.168.2.0 0.0.0.255 access-list 110 permit ip 192.168.2.0 0.0.0.255 host 192.168.1.222 access-list 110 permit ip host 192.168.1.222 192.168.2.0 0.0.0.255