Displaying Acl Information - Cisco Catalyst 3550 series Software Configuration Manual

Chapter 28 Configuring Network Security with ACLs

Displaying ACL Information

You can display the ACLs that are configured on the switch, and you can display the ACLs that have
been applied to interfaces and VLANs. You can also display information about configuration conflicts
or resource usage related to ACLs.
This section includes these topics:
•
•
Displaying ACL Configuration
You can display existing ACLs and when you use the ip access-group interface configuration command
to apply ACLs to a Layer 2 or 3 interface, you can display the access groups on the interface. You can
also display the MAC ACLs applied to a Layer 2 interface. You can use the privileged EXEC commands
as described in
Table 28-2 Commands for Displaying Access Lists and Access Groups
Command
show access-lists [number | name]
show ip access-lists [number | name]
show ip interface interface-id
show running-config [interface interface-id]
show mac access-group [interface interface-id] Displays MAC access lists applied to all Layer 2 interfaces or the specified
This is an example of output from the show access-lists privileged EXEC command, displaying all
standard and extended ACLs:
Switch# show access-lists
Standard IP access list 1
Standard IP access list 10
Standard IP access list 12
Standard IP access list 32
Standard IP access list 34
Extended IP access list 120
Extended MAC access list mac1
78-11194-09
Displaying ACL Configuration, page 28-41
Displaying ACL Resource Usage and Configuration Problems, page 28-43
Table 28-2 to display this information.
Purpose
Display the contents of one or all current IP and MAC address access lists
or a specific access list (numbered or named).
Display the contents of all current IP access lists or a specific IP access list
(numbered or named).
Display detailed configuration and status of an interface. If IP is enabled
on the interface and ACLs have been applied by using the ip access-group
interface configuration command, the access groups are included in the
display.
Displays the contents of the configuration file for the switch or the
specified interface, including all configured MAC and IP access lists and
which access groups are applied to an interface.
Layer 2 interface.
permit 172.20.10.10
permit 12.12.12.12
deny 1.3.3.2
permit 172.20.20.20
permit 10.24.35.56
permit 23.45.56.34
permit eigrp host 12.3.6.5 host 25.36.1.24
Catalyst 3550 Multilayer Switch Software Configuration Guide
Displaying ACL Information
28-41