Reference Guide

Dell PowerConnect ArubaOS 5.0 Command Line Interface | Reference Guide show ip access-list | 885
Include the name of a specific ACL to show detailed configuration information for that ACL.
The output of this command may include some or all of the following parameters:
(Host)# show ip access-list stateful-dot1x
ip access-list session stateful-dot1x
stateful-dot1x
--------------
Priority Source Destination Service Action TimeRange Log Expired Queue TOS 8021P Blacklist Mirror DisScan
-------- ------ ----------- ------- ------ ---------- --- ------- ------ --- ----- --------- ------- -------
1 any any svc-dns permit Low
2 any any svc-dhcp permit Low
3 any 127.0.0.1 udp 1812 redirect Low
Parameter Description
Priority Name of an access-control list (ACL).
Source The traffic source, which can be one of the following:
z alias: The network resource (use the netdestination command to configure aliases; use the show
netdestination command to see configured aliases)
z any: Matches any traffic.
z host: A single host IP address.
z network: The IP address and netmask.
z user: The IP address of the user.
z localip: The set of all local IP addresses on the system, on which the ACL is applied.
Destination The traffic destination, which can be one of the following:
z alias: The network resource (use the netdestination command to configure aliases; use the show
netdestination command to see configured aliases)
z any: Matches any traffic.
z host: A single host IP address.
z network: An IP address and netmask.
z user: The IP address of the user.
z localip: The set of all local IP addresses on the system, on which the ACL is applied.
Service Network service, which can be one of the following:
z An IP protocol number (0-255).
z The name of a network service (use the show netservice command to see configured services).
z any: Matches any traffic.
z tcp: A TCP port number (0-65535).
z udp: A UDP port number (0-65535).
Action Action if rule is applied, which can be one of the following:
deny: Reject packets.
dst-nat: Perform destination NAT on packets.
dual-nat: Perform both source and destination NAT on packets.
permit: Forward packets.
redirect: Specify the location to which packets are redirected, which can be one of the following:
z Datapath destination ID (0-65535).
z esi-group: Specify the ESI server group configured with the esi group command
z opcode: Specify the datapath destination ID (0x33, 0x34, or 0x82). Do not use this parameter without proper
guidance from Dell
tunnel: Specify the ID of the tunnel configured with the interface tunnel command.
src-nat: Perform source NAT on packets.
Timerange Any defined time range for this rule.
Log Shows if the rule was configured to generate a log message when the rule is applied.
Expired Shows if the rule has expired.