Cisco Nexus 5500 Series - Show Ip Access-Lists

278
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter Show Commands
show ip access-lists
show ip access-lists
To display all IPv4 access control lists (ACLs) or a specific IPv4 ACL, use the show ip access-lists
command.
show ip access-lists [access-list-name]
Syntax Description
Command Default The switch shows all IPv4 ACLs unless you use the access-list-name argument to specify an ACL.
Command Modes EXEC mode
Command History
Usage Guidelines By default, this command displays the IPv4 ACLs configured on the switch. The command displays the
statistics information for an IPv4 ACL only if the IPv4 ACL is applied to the management (mgmt0)
interface. If the ACL is applied to an SVI interface or in a QoS class map, then the command does not
display any statistics information.
Examples This example shows how to display all IPv4 ACLs on the switch:
switch# show ip access-lists
This example shows how to display all IPv4 ACLs on the switch:
switch# show ip access-lists
IP access list BulkData
10 deny ip any any
IP access list CriticalData
10 deny ip any any
IP access list Scavenger
10 deny ip any any
IP access list denyv4
20 deny ip 10.10.10.0/24 10.20.10.0/24 fragments
30 permit udp 10.10.10.0/24 10.20.10.0/24 lt 400
40 permit icmp any any router-advertisement
60 deny tcp 10.10.10.0/24 10.20.10.0/24 syn
70 permit igmp any any host-report
80 deny tcp any any rst
90 deny tcp any any ack
100 permit tcp any any fin
110 permit tcp any gt 300 any lt 400
130 deny tcp any range 200 300 any lt 600
140 deny tcp any range 200 300 any lt 600
IP access list dot
access-list-name (Optional) Name of an IPv4 ACL, which can be up to 64 alphanumeric,
case-sensitive characters.
Release Modification
5.2(1)N1(1) This command was introduced.