show running-config rule

Displays configured access rules.

Syntax

show running-config rule [ index ]
show running-config rule index { action | command command_name | operation | role }
show running-config rule { action { reject | accept } | command command_name | operation { read-only | read-write } | role role-name }

Parameters

index
Displays the rule with the specified index number. Values range from 1 through 512.
action reject | accept
Following the index parameter, indicates whether reject or accept is specified for that rule. If the index parameter is not specified, displays all rules with the specified action.
command command_name
Displays rule configuration for the specified command. To display a list of supported commands, type a question mark (?). This list varies according to whether or not you specify a rule index.
operation read-only | read-write
Following the index parameter, indicates whether read-only or read-write is specified for that rule. If the index parameter is not specified, displays all rules with the specified operation.
role role-name
Displays rule configuration for the specified role.

Modes

Privileged EXEC mode

Examples

The following example displays the configured roles and their rules.

device# show running-config rule
 
rule 30 action accept operation read-write role NetworkSecurityAdmin
rule 30 command role
!
rule 31 action accept operation read-write role NetworkSecurityAdmin
rule 31 command rule
!
rule 32 action accept operation read-write role NetworkSecurityAdmin
rule 32 command username
!
rule 33 action accept operation read-write role NetworkSecurityAdmin
rule 33 command aaa
!
rule 34 action accept operation read-write role NetworkSecurityAdmin
rule 34 command radius-server
!
rule 35 action accept operation read-write role NetworkSecurityAdmin
rule 35 command configure

The following example displays a single rule.

device# show running-config rule 30
 
rule 30
 action accept operation read-write role NetworkSecurityAdmin command role