show access-lists applied

Use this command to display applied IP access lists.

Syntax

show access-lists applied [host | interfaces [vlan-string | vlan vlan] [inbound] [outbound] [in-and-out]]

Parameters

host (Optional) Displays access list information for all applied ingress to host services.
interfaces (Optional) Displays access list information for all applied access list interface types or the specified interface type.
vlan (Optional) Displays access list information for VLAN interfaces.
inbound (Optional) Displays access list information for inbound interfaces.
outbound (Optional) Displays access list information for outbound interfaces.
in-and-out (Optional) Displays access list information for both inbound and outbound interfaces.

Defaults

If no option is applied, the entire table of applied access lists will be displayed.

Mode

All command modes.

Usage

ACL names may be up to 64 characters in length, but there is only room to display 32 characters (show applied) or 49 characters (show brief) on a single 80-character line. Names up to and including the maximum length will be displayed in their entirety. Names longer than the maximum display length will be displayed with an asterisk character followed by the last 31 or 48 characters of the name.

If an access list displays as ** unconfigured **, it means that the ACL applied to the interface or host has not yet been created. This is allowed, but the applied ACL will have no effect on traffic, since the ACL doesn't really exist yet.

Example

This example shows how to display applied IP access lists for this system:

System(rw-config)->show access-lists applied
Interface    L2 Access List (last 32 chars)   Dir  Type Ents Deny count
-----------  -------------------------------- ---- ---- ---- -------------------
vlan.0.90    l2acl1                           in   ext  11   6
vlan.0.102   l2acl2                           in    ** unconfigured **
System(rw-config)->