Administrator Guide

You can create an ACL VLAN group and attach the ACL with the VLAN members. The optimization is applicable
only when you create an ACL VLAN group. If you apply an ACL separately on the VLAN interface, each ACL has a
mapping with the VLAN and increased CAM space utilization occurs.
Attaching an ACL individually to VLAN interfaces is similar to the behavior of ACL-VLAN mapping storage in CAM
prior to the implementation of the ACL VLAN group functionality.
show acl-vlan-group
Display the configured ACL VLAN groups on the switch.
C9000 Series
Syntax
show acl-vlan-group {group-name | detail}
Parameters
group-name Display the configuration of an ACL VLAN group.
detail
Display information about all configured ACL VLAN groups in a line-by-line format.
Default No default behavior or values
Command Modes
EXEC
EXEC Privilege
Command History
Version Description
9.9(0.0) Introduced on the C9010.
9.5(0.0) Introduced on the Z9500.
9.3(0.0) Introduced on the S4810, S4820T, Z9000 and MXL.
Usage Information When an ACL VLAN group name or the access-list name contains more than 30 characters, the name is
truncated in the show show acl-vlan-group group-name command output.
Examples The following example displays the output of the show acl-vlan-group command.
NOTE: Some group names and some access list names are truncated.
Dell#show acl-vlan-group
Group Name Egress IP Acl Vlan Members
TestGroupSeventeenTwenty SpecialAccessOnlyExperts 100,200,300
CustomerNumberIdentifica AnyEmployeeCustomerEleve 2-10,99
HostGroup Group5 1,1000
The following sample output shows the line-by-line style display when using the show acl-vlan-group
detail option.
NOTE: No group or access list names are truncated
Dell#show acl-vlan-group detail
Group Name :
TestGroupSeventeenTwenty
Egress IP Acl :
SpecialAccessOnlyExpertsAllowed
Vlan Members :
100,200,300
Group Name :
CustomerNumberIdentificationEleven
Egress IP Acl :
AnyEmployeeCustomerElevenGrantedAccess
Vlan Members :
Access Control Lists (ACL)
251