KB.15.15

NOTE: This information also appears in the show running display. If you execute write

memory after configuring an ACL, it also appears in the show config display.

For information on IPv4 ACL operation, see the latest version of the Access Security Guide for your

switch.

Syntax:

show access-list <identifier> [ config]

Displays detailed information on the content of a specific ACL configured in the running-config file.

For example, suppose you configured the following two ACLs in the switch:

Desired actionTypeIdentifier

IPv6Accounting

• Permit Telnet traffic from these two IPv6 addresses:

• 2001:db8:0:1af::10: 14

• 2001:db8:0:1af::10: 24

• Deny Telnet traffic from all other devices in the same subnet.

• Permit all other IPv6 traffic from the subnet.

• Deny and log any IPv6 traffic from any other source.

IPv4 ExtendedList-120

• Permit any TCP traffic from 10.30.133.27 to any destination.

• Deny any other IPv4 traffic from 10.30.133.(1-255).

• Permit all other IPv4 traffic from any source to any destination.

Use show access-list < identifier > to inspect a specific IPv6 or IPv4 ACL, as follows:

Figure 190 Listing an IPv6 ACL

Viewing 279