47-27
access-list 3100 deny any-source-mac any-destination-mac udp any-source s-
port 100
any-destination d-port 40000
access-list 10(used 1 time(s))
Number ACL10, 0 time to be used
access-list 10 deny any-source
Deny any IP packets to pass
access-list 100(used 1 time(s))
Nnumber ACL10, 1 time to be used
access-list 100 deny ip any-source
Deny IP pac
ket of any source IP address and
destination address to pass
access-list 100 deny tcp any-source
Deny
TCP packet of any source IP address and
destination address to pass
access-list 1100 permit any-source-mac
any-destination-mac tagged-eth2 14 2 0800
Permit tagged-eth2 with
any source MAC
addresses and any destination MAC addresses
and the packets whose 15th and 16th byte is
respectively 0x08 , 0x0 to pass
access-list 3100 permit any-source-mac
any-destination-mac udp any-source s-port
100 any-destination d-port 40000
Deny the passage of UDP packets with any
source MAC address and destination MAC
address, any source IP address and destination
IP address, and source port 100 and destination
47.25 show access-group
Command:
show access-group in (interface {Ethernet | Ethernet IFNAME})
Functions:
Display the ACL binding status on the port.
Parameters:
IFNAME, Port name.
Command Mode:
Admin and Configuration Mode.
Usage Guide:
When not assigning interface names, all ACL tied to port will be revealed.
Examples:
Switch#show access-group
interface name: Ethernet 1/0/1