Cisco Catalyst 3560-X Series, Software Configuration Manual

Page: 912 / 1538

1-44
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring Network Security with ACLs
Displaying IPv4 ACL Configuration
Figure 1-9 Applying ACLs on Multicast Packets
Displaying IPv4 ACL Configuration
You can display the ACLs that are configured on the switch, and you can display the ACLs that have
been applied to interfaces and VLANs.
When you use the ip access-group interface configuration command to apply ACLs to a Layer 2 or 3
interface, you can display the access groups on the interface. You can also display the MAC ACLs
applied to a Layer 2 interface. You can use the privileged EXEC commands as described in
Table 1-2 to
display this information.
VLAN 10
map
Frame
Input
router
ACL
Output
router
ACL
Routing function
VLAN 10 VLAN 20
Host C
(VLAN 10)
Host A
(VLAN 10)
Host B
(VLAN 20)
VLAN 20
map
Packet
101360
Table 1-2 Commands for Displaying Access Lists and Access Groups
Command Purpose
show access-lists [ number | name ] Display the contents of one or all current IP and MAC address access lists
or a specific access list (numbered or named).
show ip access-lists [ number | name ] Display the contents of all current IP access lists or a specific IP access list
(numbered or named).
show ip interface interface-id Display detailed configuration and status of an interface. If IP is enabled
on the interface and ACLs have been applied by using the
ip access-group
interface configuration command, the access groups are included in the
display.
show running-config [ interface interface-id ] Displays the contents of the configuration file for the switch or the
specified interface, including all configured MAC and IP access lists and
which access groups are applied to an interface.
show mac access-group [ interface interface-i d]
Displays MAC access lists applied to all Layer 2 interfaces or the specified
Layer 2 interface.