C
HAPTER
25
| Access Control Lists
ACL Information
– 966 –
MAC access-list jerry
Console#
show access-list This command shows all ACLs and associated rules.
SYNTAX
show access-list
[[arp [acl-name]] |
[ip [extended [acl-name] | standard [acl-name]] |
[ipv6 [extended [acl-name] | standard [acl-name]] |
[mac [acl-name]] | [tcam-utilization] | [hardware counters]]
arp – Shows ingress or egress rules for ARP ACLs.
hardware counters – Shows statistics for all ACLs.
22
ip extended – Shows ingress rules for Extended IPv4 ACLs.
ip standard – Shows ingress rules for Standard IPv4 ACLs.
ipv6 extended – Shows ingress rules for Extended IPv6 ACLs.
ipv6 standard – Shows ingress rules for Standard IPv6 ACLs.
mac – Shows ingress rules for MAC ACLs.
tcam-utilization – Shows the percentage of user configured ACL
rules as a percentage of total ACL rules
acl-name – Name of the ACL. (Maximum length: 16 characters)
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show access-list
IP standard access-list david:
permit host 10.1.1.21
permit 168.92.0.0 255.255.15.0
IP extended access-list bob:
permit 10.7.1.1 255.255.255.0 any
permit 192.168.1.0 255.255.255.0 any destination-port 80 80
permit 192.168.1.0 255.255.255.0 any protocol tcp control-code 2 2
MAC access-list jerry:
permit any host 00-30-29-94-34-de ethertype 800 800
IP extended access-list A6:
deny tcp any any control-flag 2 2
permit any any
Console#
22. Due to a hardware limitation, this option only displays statistics for permit rules.
To Next Page
Loading...
Need help?
General
