topic ASA Show Command for ACL in Network Security

ASA Show Command for ACL

AshSe — Fri, 08 Dec 2023 08:16:07 GMT

What command is used to display a particular ACL applied to which interfaces on a Cisco ASA?

Re: ASA Show Command for ACL

Rob Ingram — Fri, 08 Dec 2023 08:28:08 GMT

@AshSe you can run the command show run access-group this will tell you which ACL as applied to an interface.

ASA# show run access-group
access-group INSIDE_OUT in interface INSIDE
access-group OUTSIDE_IN in interface OUTSIDE

You can then filter, run show access-list | include <ACL NAME> to filter on just the ACL attached to the interface.

ASA# show access-list | i OUTSIDE_IN
access-list OUTSIDE_IN; 1 elements; name hash: 0xe01d8199
access-list OUTSIDE_IN line 1 extended permit icmp any any echo-reply (hitcnt=0) 0xc857b49e

Re: ASA Show Command for ACL

MHM Cisco World — Fri, 08 Dec 2023 08:35:57 GMT

Show run access group

But I think issue beyond know access group apply to interface

You have drop in one interface with implicit deny ?

MHM

Re: ASA Show Command for ACL

AshSe — Fri, 08 Dec 2023 09:43:59 GMT

Can you also share the similar command in Cisco Nexus switches.

Re: ASA Show Command for ACL

Rob Ingram — Fri, 08 Dec 2023 09:49:55 GMT

@AshSe try the command show ip access-list summary and this will confirm the ACL and which interfaces it it active on.