Purpose
Command
Displays information on the active logged flows, such
as source IP and destination IP addresses, source port
and destination port information, and source
interfaces.
switch#
show logging ip access-list cache [detail]
Displays the deny maximum flow count, the current
effective log interval, and the current effective
threshold value..
switch#
show logging ip access-list status
Displays the access control list (ACL) log file in the
startup configuration.
switch#
show startup-config acllog
Displays the access control list (ACL) log file in the
startup configuration.
This command displays the user-configured
ACLs in the startup configuration. The all
option displays both the default
(CoPP-configured) and the user-configured
ACLs in the startup configuration.
Note
switch#
show startup-config aclmgr [all]
Displays the access control list (ACL) log file in the
running configuration.
switch#
show running-config acllog
Displays the access control list (ACL) log file in the
running configuration including the IP ACL
configuration and the interfaces where you have
applied IP ACLs.
This command displays the user-configured
ACLs in the running configuration. The all
option displays both the default
(CoPP-configured) and the user-configured
ACLs in the startup configuration.
Note
switch#
show running-config aclmgr [all]
About System ACLs
Beginning with Cisco NX-OS Release 7.0(3)F3(4) or a later release, you can configure system ACLs on Cisco
Nexus 36180YC-R and C3636C-R switches. With system ACLs, you can now configure a Layer 2 port ACL
(PACL) on all the ports with the same access-list in the switch. Configuring system ACLs reduces the TCAM
usage and also brings down the time and memory usage while the policy is being applied or modified.
See the following guidelines and limitations for configuring system ACLs:
•
The system PACL is supported for Layer 2 interface only.
•
ACE statistics are not yet supported for the system ACLs.
•
IPv6 is not yet supported in the system ACLs.
•
System ACLs are not supported on the breakout port.
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
89
Configuring IP ACLs
About System ACLs
