24-16
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Chapter 24 Managing Network Security with ACLs
Displaying IPv4 ACL Configuration
In this example of a named ACL, the Jones subnet is not allowed access:
Switch(config)#
ip access-list standard prevention
Switch(config-std-nacl)#
remark Do not allow Jones subnet through
Switch(config-std-nacl)#
deny 171.69.0.0 0.0.255.255
In this example of a named ACL, the Jones subnet is not allowed to use outbound Telnet:
Switch(config)#
ip access-list extended telnetting
Switch(config-ext-nacl)#
remark Do not allow Jones subnet to telnet out
Switch(config-ext-nacl)#
deny tcp 171.69.0.0 0.0.255.255 any eq telnet
Displaying IPv4 ACL Configuration
When you use the
ip access-group
interface configuration command to apply ACLs, you can display the
access groups applied on the management VLAN. You can use the privileged EXEC commands as
described in
to display this information.
Table 24-2
Commands for Displaying Access Lists and Access Groups
Command
Purpose
show access-lists
[
number
|
name
]
Display the contents of one or all current IP and MAC address access lists
or a specific access list (numbered or named).
show access-lists
[
number
|
name
]
Display the contents of all current IP access lists or a specific IP access list
(numbered or named).
show interface vlan
vlan-number
Display detailed configuration and status of the VLANs.
show running-config
[
interface
interface-id
]
Displays the contents of the configuration file for the switch or the
specified interface, including all configured MAC and IP access lists and
which access groups are applied to an interface.
