| 3.1 |  | Access Control Lists |
| 3.1.6 |  | Editing ACLs |

| Editing an ACL requires special attention. For example, if the administrator were to delete a specific line from an existing numbered ACL, the entire ACL would be deleted . To edit numbered ACLs, copy the configuration of the router to a TFTP server or a text editor such as Notepad, make any changes, and copy the configuration back to the router. Administrators can also edit an ACL as is shown in Figure . As demonstrated, any deletions will be removed from the ACL and any additions will be made to the end of the ACL.

In a production environment, changing any ACL could affect the security of the router during modifications. Using Notepad as shown in Figure is a more secure strategy for editing access lists.

To change or remove an ACL from an interface, the following syntax is used:

interface <interface>

no ip access-group # in|out

To remove an ACL, the user must go into configuration mode and enter no in front of the access-group command, as shown in Figure .