Chapter 10
| Access Control Lists
ACL Information
– 348 –
show access-list
This command shows all ACLs and associated rules.
Syntax
show access-list
[[
arp
[acl-name]] |
[
ip
[
extended
[acl-name] |
standard
[acl-name]] |
[
ipv6
[
extended
[acl-name] |
standard
[acl-name]] |
[
mac
[acl-name]] | [
tcam-utilization
] | [
hardware counters
]]
arp
– Shows ingress or egress rules for ARP ACLs.
hardware counters
– Shows statistics for all ACLs.
8
ip extended –
Shows ingress or egress rules for Extended IPv4 ACLs.
ip standard –
Shows ingress or egress rules for Standard IPv4 ACLs.
ipv6 extended –
Shows ingress or egress rules for Extended IPv6 ACLs.
ipv6 standard –
Shows ingress or egress rules for Standard IPv6 ACLs.
mac –
Shows ingress or egress rules for MAC ACLs.
tcam-utilization
– Shows the percentage of user configured ACL rules as a
percentage of total ACL rules
acl-name – Name of the ACL. (Maximum length: 32 characters)
Command Mode
Privileged Exec
Example
Console#show access-list
IP standard access-list david:
permit host 10.1.1.21
permit 168.92.0.0 255.255.15.0
IP extended access-list bob:
permit 10.7.1.1 255.255.255.0 any
permit 192.168.1.0 255.255.255.0 any destination-port 80 80
permit 192.168.1.0 255.255.255.0 any protocol tcp control-code 2 2
MAC access-list jerry:
permit any host 00-30-29-94-34-de ethertype 800 800
IP extended access-list A6:
deny tcp any any control-flag 2 2
permit any any
Console#
8. Due to a hardware limitation, this option only displays statistics for permit rules.
To Next Page
Loading...
Need help?
General