topic ASA 5510 access-list in Network Security

ASA 5510 access-list

Zeeshan Siddiqui — Wed, 13 Mar 2019 01:02:41 GMT

HI Support,

We normally configure our ACLs using ASDM as it is more difficukt using CLI because of following reasons.

When we run teh command sh access-list using CLI it comes up with naming conventions

ccess-list VLAN711_access_in line 2 extended permit tcp object-group IPODS-fashionware-house object-group FASHION-WARE-HOUSE-PRODUCTION eq www 0x63dec87

access-list VLAN711_access_in line 2 extended permit tcp host IPOD1-fashionware-house host VPT0722 eq www (hitcnt=0) 0x55f53eff

Is there a way we can actually view source destination IP address rather then naming conventions using CLI on an ASA when we run the sh access-list command

Kind Regards,

Zeeshan Siddiqui

ASA 5510 access-list

varrao — Mon, 10 Oct 2011 14:25:39 GMT

Hi Zeeshan,

You would definitely be able to see the ip addresses if you use the command " show access-list "

it should be like this:

ASA2(config)# sh access-list out_in

access-list out_in; 4 elements; name hash: 0xc6ca9adf

access-list out_in line 1 extended permit tcp any host 192.168.1.10 eq www (hitcnt=0) 0xd6fd525a

access-list out_in line 2 extended permit ip any object-group varun 0xcd68e08c

access-list out_in line 2 extended permit ip any host 1.1.1.1 (hitcnt=0) 0xc2896db0

access-list out_in line 2 extended permit ip any host 2.2.2.2 (hitcnt=0) 0xb09b1fc8

access-list out_in line 2 extended permit ip any host 3.3.3.3 (hitcnt=0) 0xd780382d

Hope that helps.

Thanks,

Varun

ASA 5510 access-list

varrao — Mon, 10 Oct 2011 14:36:01 GMT

And also, if you are using names, then all you need to do is, first use "no names" and then "show access-list " and after viewing it, do "names", thats it .

Hope that helps.

Thanks,

Varun

ASA 5510 access-list

Zeeshan Siddiqui — Mon, 10 Oct 2011 15:04:41 GMT

Hi Varun,

Many Thanks for your help have tested succesfully.

Kind Regards,

Zeeshaan Siddiqui