Cisco CCNA (640-553) Security Training
Using the “access-list remark” command
By Charles Ross CCNA - CCNP #CSCO10444244
In today’s article, I’m going to quickly inform you about the Cisco IOS Global configuration command named “access-list remark”.
CCNA’s (like you) use the “access-list remark” command to write a helpful comment (remark) for an entry in a numbered IP access list.
Note: The comment (remark) can be up to 100 characters long; and any comment (remark) that is longer than 100 characters will be truncated.
Below is the command’s syntax:
access-list access-list-number remark remark
As you can see, the command uses the access-list-number and remark arguments.
access-list-number – This argument is used to indicate the number of an IP access list.
remark – And, this argument is the actual comment (remark) that describes the access list entry. (Remember the comment (remark) has a limit of 100 characters)
Below is an example of the command being used:
Router>enable
Router#configure terminal
Router(config)#access-list 1 remark Only allow the abc workstation to get through
Router(config)#access-list 1 permit 172.69.2.98
Router(config)#access-list 1 remark Do not allow the xyz workstation to get through
Router(config)#access-list 1 deny 172.69.3.14
Router(config)#exit
Router#copy run start
In the example above, the workstation on the abc network that has the IP address 172.69.2.98 will be able to get its IP traffic through; but, the workstation that is on the xyz network that has the IP address 172.69.3.14 will not.
As you can clearly see, the access-list remark statements are commenting on the ACL behavior.
And, like with mostly all Cisco IOS commands; you can use the word “no” in front of the command to remove (disable) the configured command; like you see below:
Router(config)#no access-list 1 remark
By the way, if you decide to use the command, make sure your router(s) is running Cisco IOS 12.0(2)T or higher.
I hope this article was very informative and helped you quickly understand the usage of the access-list remark command. If you need to learn more; I suggest you visit my website, (www.ittechtips.com) were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.
To your success,
Charles Ross
CCNA- CCNP #CSCO10444244