Where are the ACLs applied ,,any command ?

[raghum]

Hi,

Suppose we have many ACLs in a cisco router with lot of interfaces. Though we can see ACLs, we cannot figure out where they are applied, until we browse through the interfaces or running congfig. Any command to list a summary of ACLs along with where they have been applied ?

Thanks for spending your valuable time.

[Jagdeep Gambhir]

You need to use

Router# show ip access-list interface FastEthernet 0/0

Hope that helps

~JG

[Pavel Bykov]

Jagdeep, that command does not exist :(

[Jagdeep Gambhir]

Hi,

This commands was added from 12.4(6)T. The interface interface-name keyword/attribute pair was added. The in and out keywords were added.

Hope that helps ;)

Regards

~JG

[glen.grant]

There is no way i know of to see that , always thought the same as you though it would be a real time saver if they had something "show access-list applied" or something like that . If you were real diligent you could a description on each one where it was applied but most people don't have that kind of time.

[raghum]

Sorry, I am visiting this space after a long time.

yes, adding some kind of description/comment would help. But thats not reliable at times as you said.

I am not sure if we can create some sort of macros/script to customise such requirements with cisco devices as we do with unix machines ? :)