Operation Manual
Security ACL Commands
Mobility System Software Command Reference Guide
Version 7.3
15 – 404
show security acl info
Displays the contents of a specified security ACL or all security ACLs that are committed—saved
in the running configuration and nonvolatile storage—or the contents of security ACLs in the edit
buffer before they are committed.
Syntax
show security acl info [acl-name | all] [editbuffer]
Defaults
None.
Access
Enabled.
History
Examples
To display the contents of all security ACLs committed on an MX, type the following
command:
MX# show security acl info
ACL information for all
set security acl ip acl_123 (hits #5 462)
---------------------------------------------------------
1. permit IP source IP 192.168.1.11 0.0.0.255 destination IP any enable-hits
2. deny IP source IP 192.168.2.11 0.0.0.0 destination IP any
set security acl ip acl_134 (hits #3 0)
---------------------------------------------------------
1. permit IP source IP 192.168.0.1 0.0.0.0 destination IP any enable-hits
set security acl ip acl_135 (hits #2 0)
---------------------------------------------------------
1. deny IP source IP 192.168.1.1 0.0.0.0 destination IP any enable-hits
The following command displays the contents of acl_123 in the edit buffer, including the
committed ACE rules 1 and 2 and the uncommitted rule 3:
MX# show security acl info acl_123 editbuffer
ACL edit-buffer information for acl_123
set security acl ip acl_123 (ACEs 3, add 3, del 0, modified 0)
---------------------------------------------------------
1. permit IP source IP 192.168.1.11 0.0.0.255 destination IP any enable-hits
2. deny IP source IP 192.168.2.11 0.0.0.0 destination IP any
3. deny SRC source IP 192.168.1.234 255.255.255.255 enable-hits
See Also
● clear security acl on page 15-391
● commit security acl on page 15-394
acl-name Name of an existing security ACL to display. ACL names must start with a letter and
are case-insensitive.
all Displays the contents of all security ACLs.
editbuffer Displays the contents of the specified security ACL or all security ACLs that are
stored in the edit buffer after being created with set security acl. If you do not use
this parameter, only committed ACLs are shown.
MSS Version 1.0 Command introduced
MSS Version 1.1 ACL names changed from case-sensitive to case-insensitive
MSS Version 4.1 The acl-name | all option is no longer required; show security acl info is valid and
displays the same information as security acl info all.