Search for specific IP address on ACL

[Jose Espinal]

Hi gurus

As you can see I am very very new to Cisco IOS, so go easy on me.

I have multiple ACL rules, they are all named and they all have many entries on each on, is there a way to check-with one command-where and what statement an specific IP address is located?

 something like (show access-list 192.192.192.192)  and it will show me in which ACL is located and what kind of rule it has?

Thanks a bunch gurus

[johnlloyd_13 · Accepted solution]

hi,

is this for an ASA or a router?

if it's ASA, try show run access-list <NAME OF ACL> | include <IP ADDRESS>

[Jose Espinal]

Big J

Thanks for jumping in and help me, it is an ASA and it worked greatly . but is there a way that the command look in all ACL and let me know where the entry is located

Thanks a bunch 

[johnlloyd_13]

hi,

i don't think there's such.

you could try to use the show run | i <IP ADDRESS> instead.

[Jose Espinal]

Thanks a bunc J.

[gnagy2]

Is there a way do to what might be called nested searches with sho access-list for Cisco ASAs (command line only) Ex:  sho access-list | inc 1.2.3.4 | inc eq ssh     Where you want to find all instances of the ip 1.2.3.4 in all the rules that permit ssh  -  That kind of thing?   TIA!

[inghugoadmin]

You can always use ASDM, or using SecureCRT just do a show access-list and search for the line.