Verifying The Ipv4-Acl Or Ipv6-Acl Configuration - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Configuring IPv4-ACLs or IPv6-ACLs
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Command
Step 2
switch(config)# no ip access-list List2 deny tcp
1.2.3.0 0.0.0.255 eq port 5 any
switch(config)# no ip access-list x3 deny ip any any
switch(config)# no ip access-list x3 permit ip any any
To remove configured entries from an IPv6-ACL, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# ipv6 access-list List3
switch(config-ipv6-acl)#
Step 3
switch(config-ipv6-acl)# no deny tcp
2001:0DB8:800:2010::/64 eq port 5 any
Step 4
switch(config-ipv6-acl)# no deny ip any any

Verifying the IPv4-ACL or IPv6-ACL Configuration

Use the show ip access-list command to view the contents of configured IPv4-ACLs. An IPv4-ACL can
have one or more filters. (See
Example 33-1 Displays Filters Configured for an IPv4-ACL
switch# show ip access-list abc
ip access-list abc permit tcp any any (0 matches)
ip access-list abc permit udp any any (0 matches)
ip access-list abc permit icmp any any (0 matches)
ip access-list abc permit ip 10.1.1.0 0.0.0.255 (2 matches)
ip access-list abc permit ip 10.3.70.0 0.0.0.255 (7 matches)
Use the show ipv6 access-list command to view the contents of configured access filters. Each access
filter can have several conditions. (See
Example 33-2 Displays Configured IPv6-ACLs
switch# show ipv6 access-list
Access List Name/Number
-------------------------------- ------- ---- --------- -------------
abc
x1
x3
Example 33-3 Displays a Summary of the Specified IPv6-ACL
switch# show ipv6 access-list abc
Cisco MDS 9000 Family CLI Configuration Guide
33-8
Chapter 33
Example 33-1.)
Example 33-2 and
Filters IF Status
3 7 active
3 1 active
0 1 not-ready Tue Jun 24 18:32:28 2003
Configuring IPv4 and IPv6 Access Control Lists
Purpose
Removes this entry from the
IPv4-ACL (List2).
Removes this entry from the
IPv4-ACL (x3).
Removes this entry from the
IPv4-ACL (x3).
Purpose
Enters configuration mode.
Configures an IPv6-ACL and enters
IPv6-ACL configuration submode.
Removes the TCP entry from the
IPv6-ACL.
Removes the IP entry from the
IPv6-ACL.
Example 33-3.)
Creation Time
Tue Jun 24 17:51:40 2003
Tue Jun 24 18:32:25 2003
OL-16184-01, Cisco MDS SAN-OS Release 3.x