Displaying IPv6 ACLs
Use the following commands to display information about IPv6 ACLs:
show ipv6 access-lists brief-
show ipv6 access-lists -
show access-list accounting show running-config access-list
To display the IPv6 ACLs configured on a device, enter the
show ipv6 access-lists brief or
show ipv6 access-lists command.
device# show ipv6 access-lists brief ipv6 access-list acl3: 100 entries ipv6 access-list b244: 1 entry ipv6 access-list cpu-ipv6: 6 entries enable accounting ipv6 access-list iv6: 1 entry enable accounting
device# show ipv6 access-lists ipv6 access-list v6-ACL1: 1 entries deny ipv6 any any ipv6 access-list v6-ACL2: 1 entries permit ipv6 any any ipv6 access-list v6-ACL3: 2 entries deny ipv6 2001:DB8:10::/64 any permit ipv6 any any ipv6 access-list v6-ACL4: 2 entries deny ipv6 2001:DB8::/64 any permit ipv6 any any ipv6 access-list rate-ACL: 1 entries permit ipv6 any any traffic-policy rate800M ipv6 access-list v6-ACL5: 8 entries permit tcp 2001:DB8::/64 any permit ipv6 2001:DB8::/64 any permit ipv6 2001:DB8:101::/64 any permit ipv6 2001:DB8:10::/64 2001:DB8:102::/64 permit ipv6 host 2001:DB8:aa:10::102 host 2001:DB8:101::102 permit ipv6 host 2001:DB8:10::101 host 2001:DB8:101::101 dscp-matching 0 dscp-marking 63 dscp-cos-mapping permit ipv6 any any dscp-matching 63 dscp-cos-mapping permit ipv6 any any fragments
To display a specific IPv6 ACL configured on a
device, enter the show ipv6
access-lists command followed by the ACL name. The following example
shows the ACL named rtr.
device# show ipv6 access-lists rtr ipv6 access-list rtr: 3 entries remark This entry permits ipv6 packets from 2001:DB8::2 to any destination permit ipv6 host 2001:DB8::2 any remark This entry denies udp packets from any source to any destination deny udp any any remark This entry denies IPv6 packets from any source to any destination deny ipv6 any any
The following example displays a summary of IPv6 ACLs that are active on VLAN 333.
device(config-vlan-333)# show ipv6 access-lists brief ipv6 access-list acl3: 100 entries ipv6 access-list b244: 1 entry ipv6 access-list cpu-ipv6: 6 entries enable accounting ipv6 access-list iv6: 1 entry enable accounting ipv6 access-list mm: 203 entries ipv6 access-list mm-cpu: 2 entries ipv6 access-list scale: 0 entry ipv6 access-list scale1: 250 entries enable accounting ipv6 access-list tp-cpu-ipv6: 1 entry ipv6 access-list tp-cpu-ipv6-p: 1 entry
The following example displays IPv6 ACL filter statements from the running configuration.
device(config-vlan-333)# show running-config access-list ipv6 ipv6 access-list acl3 sequence 10 permit ipv6 host 1234::1 any sequence 20 permit ipv6 host 2234::1 any sequence 30 permit ipv6 host 1234::2 any sequence 40 permit ipv6 host 2234::2 any sequence 50 permit ipv6 host 1234::3 any sequence 60 permit ipv6 host 2234::3 any sequence 70 permit ipv6 host 1234::4 any sequence 80 permit ipv6 host 2234::4 any sequence 90 permit ipv6 host 1234::5 any sequence 100 permit ipv6 host 2234::5 any