I can't seem to find a command or a command parameter (possibly to 'static')
that will allow me to delete a static route entry on my PIX 501.

I can accomplish it easily though the Java applet, but I don't always have
access to that (I usually shell in).

Basically I have created a forwarding rule with the 'static' command and
also added it to the access-list.

I would like to get rid of all references to this rule.

Also, is there a way to overwrite an existing rule or does it have to be
removed first?

Thanks,

In article <YqSdnXI1DevwYCTdRVn-hA@giganews.com>,
Tim Mavers <webview@hotmail.com> wrote:
:I can't seem to find a command or a command parameter (possibly to 'static')
:that will allow me to delete a static route entry on my PIX 501.

:I can accomplish it easily though the Java applet, but I don't always have
:access to that (I usually shell in).

:Basically I have created a forwarding rule with the 'static' command and
:also added it to the access-list.

:I would like to get rid of all references to this rule.

Just go into configuration mode and put in the static command again, but
prefixed with the word 'no'. For example,

no static (inside, outside) 1.2.3.4 5.6.7.8 netmask 255.255.255.255 0 0


:Also, is there a way to overwrite an existing rule or does it have to be
:removed first?

Things that can only have one state, such as an ip address for an
interface, generally get overwritten if you put in the new value.
But sometimes the interface is cranky and insists you remove
(e.g., you can't just change a password on a 'username' entry: you
have to remove the old entry and put in the new one.)

Things which can have more than one state, such as ACLs or ip pools,
require that you remove the previous entry before putting in the new
one. Even if you are using access-list line number based editting,
reusing a line number causes the new rule to be -inserted- at that point,
pushing the rest down by one.
-- 
   Entropy is the logarithm of probability   -- Boltzmann