Extreme Networks ExtremeWare 7.7, Command Reference Manual

Page: 1056 / 2620

1056 ExtremeWare 7.7 Command Reference Guide
Security Commands
show access-list
show access-list {<name> | port <portlist>}
Description
Displays access list information and real-time statistics.
Syntax Description
Default
Shows information for all access lists.
Usage Guidelines
To verify access list settings, you can view the access list configuration and see real-time statistics on
which access list entries are being accessed when processing traffic.
Example
The following command shows information on all current access lists:
show access-list
It produces output similar to the following:
Rule Dest/mask:L4DP Src/mask:L4SP Flags Hits
test1 0.0.0.0/ 0: 0 0.0.0.0/ 0: 0 I-P-X 1531
Flags: I=IP, T=TCP, U=UDP, E=Established, M=ICMP
P=Permit Rule, D=Deny Rule
N=Port Specific Rule, X=Any Port
The following command shows information on all current access lists:
show access-list
It produces output similar to the following:
#show access-list
Access-List Access-mask Vlan QoS Flags
a2 f2 DM-D
a1 f1 QP5 DI-IP-P
Flags: DM=Dest MAC, SM=Source MAC, ET=Ether Type,
T=TOS, C=Code Point, I=IP Protocol
DI=Dest IP, SI=Src IP, D4=Dest L4 Port, S4=Src L4 Port
MT=ICMP Type, MC=ICMP Code, EP=Egress Port, IP=Ingress Port
E=Permit Established, P=Permit, D=Deny, Q=Qosprofile
SC=Set Code-Point, SD=Set Dot.1p
name Specifies the name of an access list to be displayed.
portlist Specifies one or more ports or slots and ports. On a modular switch, can be a list of slots and ports.
On a stand-alone switch, can be one or more port numbers. May be in the form 1, 2, 3-5, 2:5,
2:6-2:8.