Specifications

Configuring Access Lists
21-70 Security Configuration
Configuring Access Lists
Purpose
Toreviewandconfiguresecurityaccesscontrollists(ACLs),whichpermitordenyaccessto
routinginterfacesbasedonprotocolandIPaddressrestrictions.
Commands
Thecommandsusedtoreviewandconfiguresecurityaccesslistsarelistedbelow:
show access-lists
UsethiscommandtodisplayconfiguredIPaccesslistswhenoperatinginroutermode.
Syntax
showaccess‐lists[number]
Parameters
Defaults
Ifnumberisnotspecified,theentiretableofaccess listswillbedisplayed.
Mode
Anyroutermode.
Example
ThisexampleshowshowtodisplayIPaccesslistnumber101.Thisisanextendedaccesslist,
whichpermitsordeniesICMP,UDPandIPframesbasedonrestrictionsconfiguredwiththeone
oftheaccess‐listcommands.Fordetailsonconfiguringstandardaccesslists,referto“access‐list
(standard)”on
page 21‐71.Fordetailsonconfiguringextendedaccesslists,referto“access‐list
(extended)”onpage 21‐72
.
C3(su)->router#show access-lists 101
Extended IP access list 101
Router: These commands can be executed when the device is in router mode only. For details
on how to enable router configuration modes, refer to “Enabling Router Configuration Modes” on
page 14-3.
For information about... Refer to page...
show access-lists 21-70
access-list (standard) 21-74
access-list (extended) 21-72
ip access-group 21-74
access‐list‐
number
(Optional)Displaysaccesslistinformationforaspecificaccesslistnumber.
Validvaluesare between1and199.