Reference Guide

show ip access-lists
Use this command to view summary information about all IP ACLs configured on the switch. To view
more detailed information about a specific access list, specify the ACL number or name that is used to
identify the IP ACL. It displays committed rate, committed burst size, and ACL rule hit count of packets
matching the configured ACL rule within an ACL. This counter value rolls-over on reaching the
maximum value. There is a dedicated counter for each ACL rule. ACL counters do not interact with PBR
counters.
For ACL with multiple rules, once a match occurs at any one specific rule, counters associated with this
rule only get incremented for example, consider an ACL with three rules, after matching rule two,
counters for rule three would not be incremented).
For ACL counters, if an ACL rule is configured without RATE-LIMIT, the counter value is count of
forwarded/discarded packets (for example: If burst of 100 packets sent from IXIA, the Counter value is
100).
If an ACL rule is configured with RATE LIMIT, the counter value will be the MATCHED packet count. If the
sent trac rate exceeds the configured limit, counters will still display matched packet count (despite
getting dropped beyond the configured limit since match criteria is met) that would equal the sent rate.
For example, if rate limit is set to 10 kbps and ‘matching’ trac is sent at 100 kbps, counters would
reflect 100 kbps value. If the sent trac rate is less than the configured limit, counters would display
only matched packet count. Either way, only matched packet count is reflected in the counters,
irrespective of whether they get dropped or forwarded. ACL counters do not interact with diserv
policies.
Format
show ip access-lists [accesslistnumber | name]
Mode Privileged EXEC
Column Meaning
ACL ID/Name Identifies the configured ACL number or name.
Rules Identifies the number of rules configured for the ACL.
Direction Shows whether the ACL is applied to trac coming into the interface (ingress) or leaving the
interface (egress).
Interface(s) Identifies the interface(s) to which the ACL is applied (ACL interface bindings).
VLAN(s) Identifies the VLANs to which the ACL is applied (ACL VLAN bindings).
If you specify an IP ACL number or name, the following information displays:
Note
Only the access list fields that you configure are displayed. Thus, the command output varies
based on the match criteria configured within the rules of an ACL.
Column Meaning
Rule Number The number identifier for each rule that is defined for the IP ACL.
Action The action associated with each rule. The possible values are Permit or Deny.
Match All Whether this access list applies to every packet. Possible values are True or False.
Protocol The protocol to filter for this rule.
Quality of Service Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 638