IPv4 Access Control Lists (ACLs)

Displaying ACL Configuration Data

ProCurve(config)# show access-list List-120

Access Control Lists

Name: List-120

Type: Extended

 

Indicates whether the ACL

 

 

 

Applied: No

 

is applied to an interface.

 

 

 

SEQ

Entry

 

 

 

 

 

 

 

Indicates source and destination entries in the ACL.

------

--------------------------------

--------------------------------

10

Action: permit

 

 

 

 

 

 

Remark: Telnet Allowed

Port(s): eq 23

 

Src IP: 10.30.133.27

Mask: 0.0.0.0

 

Dst IP: 0.0.0.0

Mask: 255.255.255.255

Port(s):

 

Proto

: TCP (Established)

 

 

 

TOS

: -

 

Precedence: routine

 

 

20

Action: deny (log)

 

 

Empty field indicates that

 

 

the destination TCP port

 

Src IP: 10.30.133.1

Mask: 0.0.0.255

Port(s)

can be any value.

 

:

 

Dst IP: 0.0.0.0

Mask: 255.255.255.255

Port(s):

 

 

Proto

: IP

Precedence: -

 

 

 

TOS

: -

 

 

30

Action: permit

Mask: 255.255.255.255

Port(s):

 

Src IP: 0.0.0.0

 

Dst IP: 0.0.0.0

Mask: 255.255.255.255

Port(s):

 

Proto

: IP

Precedence: -

 

 

 

TOS

: -

 

 

Figure 9-31. Examples of Listings Showing the Content of Standard and Extended ACLs

Table 9-8. Descriptions of Data Types Included in Show Access-List < acl-id> Output

Field

Description

Name

The ACL identifier. Can be a number from 1 to 199, or a name.

Type

Standard or Extended. The former uses only source IP addressing. The latter uses both source and

 

destination IP addressing and also allows TCP or UDP port specifiers.

Applied

“Yes” means the ACL has been applied to a port. “No” means the ACL exists in the switch configuration,

 

but has not been applied to any interface, and is therefore not in use.

SEQ

The sequential number of the Access Control Entry (ACE) in the specified ACL.

Entry

Lists the content of the ACEs in the selected ACL.

Action

Permit (forward) or deny (drop) a packet when it is compared to the criteria in the applicable ACE and found

 

to match. Includes the optional log option, if used, in deny actions.

Remark

Displays any optional remark text configured for the selected ACE.

9-90