show access-list dynamic rule

Example

The following command displays the syntax of the dynamic ACL udpacl:

show access-list dynamic rule udpacl

The output of the command is similar to the following:

entry udpacl {
if match all {
source-address 10.203.134.0/24 ;
destination-address 140.158.18.16/32 ;
protocol udp ;
source-port 190 ;
destination-port 1200 - 1250 ;
} then {
permit  ;
} }

The following command displays where the dynamic ACL udpacl has been applied:

show access-list dynamic rule udpacl

The output of the command is similar to the following:

Rule updacl has been applied to the following interfaces.
Vlan Name    Port   Direction
=================================
*            1      ingress

The lawful intercept user can display the names of the existing dynamic ACLs and a count of how many times each is used when the following command is issued:

* show access-list dynamic   
Dynamic Rules: ((*)- Rule is non-permanent )       
(*)hclag_arp_0_4_96_51_fe_b2  Bound to 0 interfaces for application HealthCheckLAG   
(*)idmgmt_def_blacklist       Bound to 0 interfaces for application IdentityManager   
(*)idmgmt_def_whitelist       Bound to 0 interfaces for application IdentityManager   
(*)mirror-data                Bound to 2 interfaces for application CLI    

Use the following command to see the conditions and actions for a dynamic ACL:

* show access-list dynamic rule "mirror-data"   
entry mirror-data {   
if match all {       
    source-address 10.66.9.8/24 ;       
    protocol udp ;   
} then {       
    permit ;       
    mirror law_mirror ;   
} }