show access-lists displays all configured ACLs. Use show ip access-lists to display only IP ACLs; for IP-only configurations, both commands show the same output. section 23.2.1 section 23.4
Use the output to verify:
- The ACL type and identifier, such as Standard IP access list 1. section 23.2.1
- The ordered ACEs and their automatically assigned sequence numbers, typically 10, 20, and so on. section 23.2.1
- Whether configured permit and deny entries match the intended traffic policy. section 23.2.2
Verify ACL 1
R2# show access-lists Standard IP access list 1 10 deny 192.168.1.0, wildcard bits 0.0.0.255 20 permit 192.168.0.0, wildcard bits 0.0.255.255 The output confirms the ACL entries and their processing order. The optional remark appears in the configuration, not in this display. section 23.2.1
R2# show access-lists
Standard IP access list 1
10 deny 192.168.1.0, wildcard bits 0.0.0.255 #1
20 permit 192.168.0.0, wildcard bits 0.0.255.255 #2
#1 The first ACE is assigned sequence number 10.
#2 The second ACE is assigned sequence number 20.
Browse representative Cisco IOS output showing an ACL identifier, wildcard bits, ACE sequence numbers, and permit/deny actions. section 23.2.1
