HP HP ProCurve Series 6600, Access Security Manual

Page: 520 / 778

10-100
IPv4 Access Control Lists (ACLs)
Displaying ACL Configuration Data
Figure 10-33. Example of an ACL Configured Syntax Listing
Display the RACL and VACL Assignments for a VLAN
This command briefly lists the identification and type(s) of IPv4 RACLs and
IPv4 and IPv6 VACLs currently assigned to a particular VLAN in the running-
config file. (For IPv4, the switch supports, per-VLAN, one inbound and one
outbound RACL assignment per VLAN, plus one VACL assignment. For IPv6,
the switch supports, per-VLAN, one VACL assignment.)
N o t e
This information also appears in the show running display. If you execute write
memory after configuring an ACL, it also appears in the show config display.
HP Switch(config)# show access-list config
ip access-list extended "101"
10 permit tcp 10.30.133.27 0.0.0.0 0.0.0.0 255.255.255.255
20 permit tcp 10.30.155.101 0.0.0.0 0.0.0.0 255.255.255.255
30 deny ip 10.30.133.1 0.0.0.0 0.0.0.0 255.255.255.255 log
40 deny ip 10.30.155.1 0.0.0.255 0.0.0.0 255.255.255.255
exit
ipv6 access-list "Accounting"
10 permit tcp 2001:db8:0:1af::10:14/128 ::/0 eq 23
20 permit tcp 2001:db8:0:1af::10:23/128 ::/0 eq 23
30 deny tcp 2001:db8:0:1af::10/116 ::/0 log
40 permit ipv6 2001:db8:0:1af::10/116 ::/0
50 deny ipv6 ::/0 ::/0 log
exit
ipv6 access-list "List-01-Inbound"
10 permit icmp fe80::10:60/128 ::/0 dscp 38
20 permit icmp fe80::10:77/128 ::/0 dscp 38
30 permit icmp fe80::10:83/128 ::/0 dscp 38
40 deny icmp ::/0 ::/0 dscp 38
50 permit ipv6 fe80::10/112 ::/0
60 deny ipv6 fe80::/64 ::/0
exit
Syntax: show access-list vlan < vid >
Lists the current IPv4 and IPv6 ACL assignments to the spec-
ified VLAN (in the running config file).