280
DCS-3950 series Ethernet switch manual
Command: show access-lists [<num>|<acl-name>]
Functions: Reveal ACL of configuration
Parameters: <acl-name>, specific ACL name character string; <num>, specific ACL No.
Default: None
Command mode:Admin Mode
Usage Guide: When not assigning names of ACL, all ACL will be revealed, used x time
（s）indicates the times of ACL to be used.
Example:
Switch#show access-lists
access-list 10(used 0 time(s))
access-list 10 deny any-source
access-list 100(used 1 time(s))
access-list 100 deny ip any-source any-destination
access-list 100 deny tcp any-source any-destination
access-list 1100(used 0 time(s))
access-list 1100 permit any-source-mac any-destination-mac tagged-eth2 14 2 0800
access-list 3100(used 0 time(s))
access-list 3100 deny any-source-mac any-destination-mac udp any-source s-port 100
any-destination d-port 40000
Displayed information Explanation
access-list 10(used 0 time(s)) Number ACL10, 0 time to be used
access-list 10 deny any-source Deny any IP packets to pass
access-list 100(used 1 time(s)) Nnumber ACL10, 1 time to be used
access-list 100 deny ip any-source
any-destination
Deny IP packet of any source IP address
and destination address to pass
access-list 100 deny tcp any-source
any-destination
Deny TCP packet of any source IP address
and destination address to pass
access-list 1100 permit any-source-mac
any-destination-mac tagged-eth2 14 2
0800
Permit tagged-eth2 with any source MAC
addresses and any destination MAC
addresses and the packets whose 15
th
and
16
th
byte is respectively 0x08 , 0x0 to pass
access-list 3100 permit any-source-mac
any-destination-mac udp any-source
s-port 100 any-destination d-port 40000
Deny the passage of UDP packets with
any source MAC address and destination
MAC address, any source IP address and
destination IP address, and source port
100 and destination interface 40000
15.5.1.2 show access-group
Command: show access-group [interface [Ethernet] <name>]
To Next Page
Loading...
Need help?
General