Solved

Cisco Switch or Router "Show IP access-list| inc [IP]" for finding the number or name of a access-list

Posted on 2013-12-02
2
387 Views
Last Modified: 2013-12-02
Is there a command to view an ip being blocked on a access-list that will also show the number or name of the access list?

I know about the command “sh access-list | inc 192.168.1.12” and this will show if it’s being applied on an access list, but not the name of the access list.
0
Comment
Question by:dsterling
2 Comments
 
LVL 57

Expert Comment

by:giltjr
ID: 39690032
Nope.  If you have a lot of access lists, your best bet is to copy the configuration file to your computer and look at the file in some file editor.

Dup of:

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_28307451.html
0
 
LVL 20

Accepted Solution

by:
rauenpc earned 500 total points
ID: 39690115
If you just want to see the name of the access-list as well as a line number, use multiple strings in the show statement:

BW_RTR_01#show access-list | inc Standard|Extended|10.6.129.0
Standard IP access list 1
Standard IP access list 20
Standard IP access list 23
Standard IP access list REDISTRIBUTE-STATIC-CONNECTED
    110 permit 10.6.129.0, wildcard bits 0.0.0.255
Extended IP access list 100
Extended IP access list 101
Extended IP access list 142
Extended IP access list 152
Extended IP access list WAAS61
    20 deny ip any 10.6.129.0 0.0.0.255 (26099487 matches)
Extended IP access list WAAS62
Extended IP access list testsrst



You will get additional lines, but any access-list match will always fall directly under the name of the ACL so it's not too hard to see where things are located.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

New Server 172.16.200.2  was moved from behind Router R2 f0/1 to behind router R1 int f/01 and has now address 172.16.100.2. But we want users still to be able to connected to it by old IP. How to do it ? We can used destination NAT (DNAT).  In DNAT…
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now