show access-list config


show access-list config


Lists the configuration details for every IPv4 and IPv6 ACL in the running-config file, regardless of whether any are assigned to filter traffic on specific interfaces.


You can use the output from this command for input to an offline text file in which you can edit, add, or delete ACL commands.

This information also appears in the show running output. If you execute write memory after configuring an ACL, it appears in the show config output.

Example output

This example shows the ACLs on a switch configured with two IPv6 ACLs named "Accounting" and "List-01-Inbound", and one extended IPv4 ACL named "101":

Switch(config)# show access-list config

ip access-list extended "101"
     10 permit tcp
     20 permit tcp
     30 deny ip log
     40 deny ip
ipv6 access-list "Accounting"
     10 permit tcp 2001:db8:0:1af::10:14/128 ::/0 eq 23
     20 permit tcp 2001:db8:0:1af::10:23/128 ::/0 eq 23
     30 deny tcp 2001:db8:0:1af::10/116 ::/0 log
     40 permit ipv6 2001:db8:0:1af::10/116 ::/0
     50 deny ipv6 ::/0 ::/0 log
ipv6 access-list "List-01-Inbound"
     10 permit icmp fe80::10:60/128 ::/0 dscp 38
     20 permit icmp fe80::10:77/128 ::/0 dscp 38
     30 permit icmp fe80::10:83/128 ::/0 dscp 38
     40 deny icmp ::/0 ::/0 dscp 38
     50 permit ipv6 fe80::10/112 ::/0
     60 deny ipv6 fe80::/64 ::/0