Verifying ACLs on an interface Which command tells you whether an IP ACL is applied to a particular interface and in which direction?
-
Ashow ip port
-
Bshow access-lists
-
Cshow ip interface
-
Dshow access-lists interface
-
Eshow interface access-group
Answer
Correct Answer: show ip interface
Explanation
Introduction / Context:When troubleshooting reachability, you often need to confirm whether an ACL is bound to an interface and whether it is inbound or outbound. Cisco IOS provides several show commands; knowing the one that directly states ACL bindings saves time and avoids misinterpretation of raw ACL lines.
Given Data / Assumptions:
- IPv4 environment on Cisco IOS.
- ACLs may be numbered or named.
- We need to check binding and direction on a specific interface.
Concept / Approach:
show ip interface
Step-by-Step Solution:
Run show ip interfaceVerification / Alternative check:
Checking show running-config interface
Why Other Options Are Wrong:
- show access-lists: no interface binding shown.
- Other commands listed are not valid IOS commands for this purpose.
Common Pitfalls:
- Looking only at ACL counters without confirming that the ACL is actually applied to the traffic path.
- Forgetting the direction semantics: “in” means packets entering the interface.
Final Answer:
show ip interface