Product guide

Access Control Lists (ACLs) for the Series 5300xl Switches
Displaying ACL Data
Table 9-6. Descriptions of Data Types Included in Show Access-List < acl-id > Output
Field Description
Name The ACL identifier. Can be a number from 1 to 199, or a name.
Type Standard or Extended. The former uses only source IP addressing. The latter uses both source and destination
IP addressing and also allows TCP or UDP port specifiers.
Applied “Yes” means the ACL has been applied to a VLAN. “No” means the ACL exists in the switch configuration, but
has not been applied to any VLANs, and is therefore not in use.
ID The sequential number of the Access Control Entry (ACE) in the specified ACL.
action Permit (forward) or deny (drop) a packet when it is compared to the criteria in the applicable ACE and found
to match.
IP In Standard ACLs: The source IP address to which the configured mask is applied to determine whether there
is a match with a packet.
In Extended ACLs: The source and destination IP addresses to which the corresponding configured masks are
applied to determine whether there is a match with a packet.
Mask The mask configured in an ACE and applied to the corresponding IP address in the ACE to determine whether
a packet matches the filtering criteria.
proto Used only in extended ACLs to specify the packet protocol type to filter. Must be either IP, TCP, or UDP.
oper Used only in extended ACLs where a TCP or UDP port type and number have been entered. Specifies how to
compare the corresponding TCP or UDP port number in a packet to the port number in the ACE.
port(s) Used only in extended ACLs to show any TCP or UDP port number that has been entered in the ACE.
Log Shows the status of logging for the entry (ACE). A blank space indicates ACL logging is not enabled for that ACE.
Display All ACLs and Their Assignments in the
Switch Startup-Config File and Running-Config File
The show config and show running commands include in their listings any
configured ACLs and any ACL assignments to VLANs. Refer to figure 9-11
(page 9-36) and figure 9-12 (page 9-37) for examples. Remember that show
config lists the startup-config file and show running lists the running-config file.
9-52