I'm configuring a router for which I have an access list. I know what rules I want to configure, but I can't figure out how to change the sequence for my ip permit any any
statement. Here is the result of do sh ip access-list
:
Standard IP access list 1
10 permit any (4539676 matches)
Extended IP access list aSheild
10 permit ip any any
Extended IP access list aShield
20 permit ip any any (7101310 matches)
30 deny tcp any any eq ftp
40 deny tcp any any eq ftp-data
50 deny tcp any any eq www
60 deny tcp any any eq telnet
So my question is two fold:
1. Why do I have two Extended IP access list aShield
?
2. How can I get the permit ip any any to the bottom?