topic show access-list | include in Network Security

show access-list | include

Nathan Hawkins — Tue, 12 Mar 2019 01:10:32 GMT

Couple questions on show with include

1. Can you do a show command with include and a space meaning can you search for say "permit ip"?

2. Can you do a search for an exclude say "show access-list | exclude eq"?

show access-list | include

jocamare — Wed, 06 Mar 2013 17:41:01 GMT

The answer to both questions is YES.

show access-list | include

jocamare — Wed, 06 Mar 2013 17:43:06 GMT

Forgot to mention that you can also use a second pipe as a OR in your expression.

show access-list | include

Nathan Hawkins — Wed, 06 Mar 2013 18:01:34 GMT

Heh - ok - I was more interested in what the examples would look like. I feel a bit silly for the second question...I guess I never paid any attention to the options after a pipe... so I see you can do a pipe exclude but how do you do the include for words and spaces?

Can you do a show command for access-list where you are looking for permit IP without "eq"?

Re: show access-list | include

Jouni Forss — Wed, 06 Mar 2013 18:33:28 GMT

Hi,

I dont think any "access-list" line that has "permit ip" has an "eq" as those are only used with either UDP or TCP only permit statements that have/use ports.

If on the other hand you are talking about looking for ACL lines that allow UDP or TCP without any port restrictions then this might work

ACL lines with "permit tcp" without "eq"

ACL lines with "permit udp" without "eq"

EDIT: The above doesnt filter every possible other line from the output though, depending on your ACL configuration.

- Jouni

show access-list | include

jocamare — Wed, 06 Mar 2013 18:34:05 GMT

Sure, examples:

How do you do the include for words and spaces?

When filtering you can use the underscore to refer to spaces on the lines.

Can you do a show command for access-list where you are looking for permit IP without "eq"?

You can't mix commands like, mixing "inc" & "exc". So no.

Besides, the only available option when using two or more pipes is only OR, in case you were wondering.

Now, examples

show run access-list test

access-list test remark hello world

access-list test remark helloworld

access-list test remark hey hello world

access-list test remark heyhelloworld

Now, filtering:

show runnaccess-list | i hello

access-list test remark hello world

access-list test remark helloworld

access-list test remark hey hello world

access-list test remark heyhelloworld

show run access-list | i _world

access-list test remark hello world

access-list test remark hey hello world

show run access-list | i hey | world

access-list test remark hello world

access-list test remark hey hello world

I think that covers it.

Here is a good articule about the topic:

http://stack.nil.com/ipcorner/EnhanceIOSUI/