
28-41
Catalyst 3550 Multilayer Switch Software Configuration Guide
78-11194-09
Chapter 28 Configuring Network Security with ACLs
Displaying ACL Information
Displaying ACL Information
You can display the ACLs that are configured on the switch, and you can display the ACLs that have
been applied to interfaces and VLANs. You can also display information about configuration conflicts
or resource usage related to ACLs.
This section includes these topics:
•
Displaying ACL Configuration, page 28-41
•
Displaying ACL Resource Usage and Configuration Problems, page 28-43
Displaying ACL Configuration
You can display existing ACLs and when you use the ip access-group interface configuration command
to apply ACLs to a Layer 2 or 3 interface, you can display the access groups on the interface. You can
also display the MAC ACLs applied to a Layer 2 interface. You can use the privileged EXEC commands
as described in
to display this information.
This is an example of output from the show access-lists privileged EXEC command, displaying all
standard and extended ACLs:
Switch# show access-lists
Standard IP access list 1
permit 172.20.10.10
Standard IP access list 10
permit 12.12.12.12
Standard IP access list 12
deny 1.3.3.2
Standard IP access list 32
permit 172.20.20.20
Standard IP access list 34
permit 10.24.35.56
permit 23.45.56.34
Extended IP access list 120
permit eigrp host 12.3.6.5 host 25.36.1.24
Extended MAC access list mac1
Table 28-2 Commands for Displaying Access Lists and Access Groups
Command
Purpose
show access-lists [number | name]
Display the contents of one or all current IP and MAC address access lists
or a specific access list (numbered or named).
show ip access-lists [number | name]
Display the contents of all current IP access lists or a specific IP access list
(numbered or named).
show ip interface interface-id
Display detailed configuration and status of an interface. If IP is enabled
on the interface and ACLs have been applied by using the ip access-group
interface configuration command, the access groups are included in the
display.
show running-config [interface interface-id]
Displays the contents of the configuration file for the switch or the
specified interface, including all configured MAC and IP access lists and
which access groups are applied to an interface.
show mac access-group [interface interface-id] Displays MAC access lists applied to all Layer 2 interfaces or the specified
Layer 2 interface.