Rearranging the lines in the CISCO 1720 Router

[libroos]

Hi guys,

I noticed that my configurations in my CISCO router is not arranged in the IP number sequence format.

eg.:

access-list 10.10.2.1 any host any host eq www
access-list 10.10.2.2 any host any host eq telnet
access-list 10.10.2.2 any host any host eq ftp
access-list 10.10.2.1 any host any host eq telnet
access-list 10.10.2.2 any host any host eq 8060

How do I rearrange in the config t, or is there any other faster command whereby I can re-edit the configurations in text and re-import them to become the following?

access-list 10.10.2.1 any host any host eq www
access-list 10.10.2.1 any host any host eq telnet
access-list 10.10.2.2 any host any host eq 8060
access-list 10.10.2.2 any host any host eq telnet
access-list 10.10.2.2 any host any host eq ftp

Are there any best practice for configuring ADSL router (CISCO 1720) to enhance security as well as network performance?

Pls advice. Thks.

Rgds,
libroos

 

[fmonteiro]

You should copy/past your access-list to an editor of your preference (notepad/wordpad) and put the statements listed in your preference. You should then delete the access-list from the router configuration and then copy/past it back to the router.

You may start your security practice by permiting only connections initated by the internal network. Everything else is blocked. You may tehn start permiting inbound traffic as needed.

For example:
interface ethernet0
ip access-group 102 in
!
access-list 102 permit tcp any any gt 1023 established

 

[libroos]

Hi fmonterio,

Thank you for ur quick response.. : )

By the way, you mean to say, I need to copy and paste the access list one by one back to the router?

for the deletion, I have to delete one by one 1st?

I do not have the following similar line in my router..
"access-list 102 permit tcp any any gt 1023 established"

Do you have any good sites for beginners?

Thanks,
libroos

 

[fmonteiro]

You may copy and paste all access-lists at once.

For deletion you have to delete them one by one. I mean, if you have an access-list with, let's say, five entries, you just enter "no access-list number/name".

I have a good access-list material for beginners but I have it only in PDF format. Please, post an e-mail address where I may send it for you.

 

[libroos]

Hi fmonteiro ,

Thank you very much for your expert advice and prompt reply...

This is my personal email address:

mailto:9rgl1jp02@sneakemail.com

By the way, do you know of any good configurations for ADSL router (Cisco 1720)? Any good sites to recommend?

Thanks,
libroos

 

[fmonteiro]

I am sending the PDF file.

Here you have the Cisco home page for ADSL. It includes design, samples and tips, documentation, etc.

http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Internetworking:DSL

 

[libroos]

Hi fmonteiro,

Thank you very much for all your advice.

I shall refer to the pdf doc as well as the Cisco Site..

: )

Cheers,
libroos7