Show access-lists command

From NetworkCommands

A command available on most Cisco platforms; used to display existing Access Control Lists (ACLs) and related statistics.

Usage Syntax

show access-lists (acl-name | acl-number) [interface interface-name [direction]]

Common options and parameters include;

• acl-name - specify a named ACL
• acl-number - specify a numbered ACL
• interface - optionally specify to only display statistics for the ACL as it is applied to the interface (and possibly direction) specified next
• interface-name - specifiy the interface name the ACL is applied to (if the interface parameter is used)
• direction - optionally specifiy the direction the ACL is applied to on an interface

Usage Examples

show access-lists 150 - display 'global' statistics for the ACL numbered 150

show access-lists TEST_ACL - display 'global' statistics for the ACL named TEST_ACL

show access-lists 150 interface GigabitEthernet12/3 in - display specific statistics for the ACL numbered 150 as applied to interface GigabitEthernet12/3, direction in

Usage Notes

Unless you specify an interface name (and possibly a direction,) the statistics shown are the total for the access list, which may be applied to multiple interfaces in different directions and lines and could also be used for other purposes such as restricting SNMP access.

Typical Output

router#sh access-lists 150
Extended IP access list 150
    10 permit icmp host 2.2.2.2 host 2.2.2.1 (5 matches)
    20 permit ip 10.2.1.0 0.0.0.255 1.1.0.0 0.0.255.255 (5076 matches)
    30 permit ip 10.2.5.0 0.0.0.255 1.1.0.0 0.0.255.255
    40 permit ip 10.2.7.0 0.0.0.255 1.1.0.0 0.0.255.255 (17336 matches)
    50 permit ip 10.2.9.0 0.0.0.255 1.1.0.0 0.0.255.255
    60 permit ip 10.2.11.0 0.0.0.255 1.1.0.0 0.0.255.255 (3177676 matches)

Availability

The interface parameter is only available in IOS versions 12.4 or later.

Related Articles

You may be interested in our Standard IP ACL Guide article

For further information on ACLs see the ACLs article category

Information on other Cisco commands

Information on Vyatta commands

Information on Extreme commands

Information on Linux commands

Information on F5 BigIP commands

Information on Blue Coat SGOS commands

Information on Nokia IPSO commands

We really do appreciate all feedback so please do send your comments, suggestions or corrections to steve#networkstuff.eu (replacing the # with an @)