Show Access-List - Extreme Networks ExtremeWare Command Reference Manual

Security Commands

show access-list

show access-list {<name> | port <portlist>}
Description
Displays access list information and real-time statistics.
Syntax Description
name Specifies the name of an access list to be displayed.
portlist Specifies one or more ports or slots and ports. On a modular switch, can be a list of slots and ports.
On a stand-alone switch, can be one or more port numbers. May be in the form 1, 2, 3-5, 2:5,
2:6-2:8.
Default
Shows information for all access lists.
Usage Guidelines
To verify access list settings, you can view the access list configuration and see real-time statistics on
which access list entries are being accessed when processing traffic.
Example
The following command shows information on all current access lists:
show access-list
It produces output similar to the following:
Rule Dest/mask:L4DP
test1 0.0.0.0/ 0:
Flags: I=IP, T=TCP, U=UDP, E=Established, M=ICMP
P=Permit Rule, D=Deny Rule
N=Port Specific Rule, X=Any Port
The following command shows information on all current access lists:
show access-list
It produces output similar to the following:
#show access-list
Access-List Access-mask
a2
a1
Flags: DM=Dest MAC, SM=Source MAC, ET=Ether Type,
T=TOS, C=Code Point, I=IP Protocol
DI=Dest IP, SI=Src IP, D4=Dest L4 Port, S4=Src L4 Port
MT=ICMP Type, MC=ICMP Code, EP=Egress Port, IP=Ingress Port
E=Permit Established, P=Permit, D=Deny, Q=Qosprofile
SC=Set Code-Point, SD=Set Dot.1p
#show access-list a1
Access-list with name "a1" created by user
Access-mask:
1024
Src/mask:L4SP
0 0.0.0.0/ 0:
Vlan QoS Flags
f2 DM-D
f1 QP5 DI-IP-P
"f1"
Flags Hits
0 I-P-X 1531
ExtremeWare 7.5 Command Reference Guide