10-106
IPv4 Access Control Lists (ACLs)
Displaying ACL Configuration Data
Table 10-7. Descriptions of Data Types Included in Show Access-List < acl-id > Output
Display All ACLs and Their Assignments in the Routing
Switch Startup-Config File and Running-Config File
The show config and show running commands include in their listings any
configured ACLs and any ACL assignments to VLANs. Refer to figure 10-12
(page 10-45) for an example. Remember that show config lists the startup-
config file and show running lists the running-config file.
Field Description
Name The ACL identifier. Can be a number from 1 to 199, or a name.
Type Standard or Extended. The former uses only source IPv4 addressing. The latter uses both source and
destination IPv4 addressing and also allows TCP or UDP port specifiers.
Applied “Yes” means the ACL has been applied to a port or VLAN interface. “No” means the ACL exists in the switch
configuration, but has not been applied to any interface, and is therefore not in use.
SEQ The sequential number of the Access Control Entry (ACE) in the specified ACL.
Entry Lists the content of the ACEs in the selected ACL.
Action Permit (forward) or deny (drop) a packet when it is compared to the criteria in the applicable ACE and found
to match. Includes the optional log option, if used, in deny actions.
Remark Displays any optional remark text configured for the selected ACE.
IP Used for Standard ACLs: The source IPv4 address to which the configured mask is applied to determine
whether there is a match with a packet.
Src IP Used for Extended ACLs: Same as above.
Dst IP Used for Extended ACLs: The source and destination IPv4 addresses to which the corresponding configured
masks are applied to determine whether there is a match with a packet.
Mask The mask configured in an ACE and applied to the corresponding IPv4 address in the ACE to determine
whether a packet matches the filtering criteria.
Proto Used only in extended ACLs to specify the packet protocol type to filter. Must be either IPv4, TCP, or UDP.
For TCP protocol selections, includes the established option, if configured.
Port(s) Used only in extended ACLs to show any TCP or UDP operator and port number(s) included in the ACE.
TOS Used only in extended ACLs to indicate Type-of-Service setting, if any.
Precedence Used only in extended ACLs to indicate the IP precedence setting, if any.
To Next Page
Loading...
Need help?
General