Your Ad Here

View ACL Statistics in Cisco router or Switch

Filed under: , by: Network World

Objectives:

Which ACLs are being used.
How many times an ACL entry (ACE) was used and on which interface.

Router# show access-lists ?
  <1-2699>           ACL number
  WORD               ACL name
  compiled           Compiled access-list statistics
  rate-limit         Show rate-limit access lists
  |                  Output modifiers

By number:


Router# show access-list 158

Extended IP access list 158

10 deny ip any any time-range denytime (active) (65951975 matches)

By name:


Router# show access-list MyACL
Extended IP access list MyACL
    10 permit tcp host 21.35.80.22 eq telnet host 21.23.77.101
    20 permit tcp host 21.35.80.25 eq 16100 host 21.23.77.101 (149407

Access-lists per interface and per direction:

Input ACL-

Router# show ip access-list interface FastEthernet 0/1 in Extended IP access list 150 in 10 permit ip host 10.1.1.1 any (3 matches) 30 permit ip host 10.2.2.2 any (12 matches)

Output ACL-

Router# show ip access-list interface FastEthernet 0/0 out Extended IP access list myacl out 5 deny ip any 10.1.0.0 0.0.255.255 10 permit udp any any eq snmp (6 matches)

0 comments:

Post a Comment
Subscribe to: Post Comments (Atom)