Difficulty: Easy
Correct Answer: show access-lists
Explanation:
Introduction / Context:
Troubleshooting packet filters requires verifying what is actually configured. Network operating systems provide show commands to list Access Control Entries (ACEs) within access lists, including standard, extended, and named variants. Selecting the correct command prevents guesswork and shortens outage windows.
Given Data / Assumptions:
Concept / Approach:
The canonical command to view every configured access list and its ACEs is show access-lists (or the more specific show ip access-lists for IP ACLs). By contrast, interface-oriented show commands reveal application status but not the full ACE details of all ACLs.
Step-by-Step Solution:
Verification / Alternative check:
Executing the command returns ordered ACEs; counters may show hit counts, aiding rule analysis and cleanup.
Why Other Options Are Wrong:
show all access-lists (A) is not valid syntax.
show ip interface (C) and show interface (D) focus on interface status; they do not dump all ACL contents.
Common Pitfalls:
Confusing “applied where” versus “what is inside”; forgetting that sequence numbers matter when inserting or deleting ACEs.
Final Answer:
show access-lists
Discussion & Comments