Displaying Access Groups - Cisco 2950 - Catalyst Switch Configuration Manual

Displaying ACL Information
This example shows all standard and extended ACLs:
Switch# show access-lists
Standard IP access list 1
Standard IP ACL 10
Standard IP access list 12
Standard IP access list 32
Standard IP access list 34
Extended IP access list 120
Extended MAC access list mac1
This example shows only IP standard and extended ACLs.
Switch# show ip access-lists
Standard IP access list 1
Standard IP access list 10
Standard IP access list 12
Standard IP access list 32
Standard IP access list 34
Extended IP access list 120

Displaying Access Groups

Note This feature is available only if your switch is running the EI.
You use the ip access-group interface configuration command to apply ACLs to a Layer 3 interface.
When IP is enabled on an interface, you can use the show ip interface interface-id privileged EXEC
command to view the input and output access lists on the interface, as well as other interface
characteristics. If IP is not enabled on the interface, the access lists are not shown.
This example shows how to view all access groups configured for VLAN 1:
Switch# show ip interface vlan 1
GigabitEthernet0/2 is up, line protocol is down
Internet address is 10.20.30.1/16
Broadcast address is 255.255.255.255
Address determined by setup command
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is permit Any
Inbound
<information truncated>
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
29-22
permit 172.20.10.10
permit 12.12.12.12
deny 1.3.3.2
permit 172.20.20.20
permit 10.24.35.56
permit 23.45.56.34
permit 172.20.10.10
permit 12.12.12.12
deny 1.3.3.2
permit 172.20.20.20
permit 10.24.35.56
permit 23.45.56.34
access list is 13
Chapter 29 Configuring Network Security with ACLs
78-11380-10