Viewing ACL configuration: On a Cisco router, which privileged EXEC command displays the full contents of all access lists configured on the device?

Difficulty: Easy

Correct Answer: Router# show access-lists

Explanation:


Introduction / Context:
During troubleshooting and validation, engineers often need to see the current ACL entries exactly as the router will process them. Cisco IOS provides specific show commands for this purpose.



Given Data / Assumptions:

  • We need a command that outputs every ACL (standard, extended, named) and their entries.
  • Command is run in privileged EXEC mode (prompt ends with #).
  • We are not merely checking whether ACLs are applied to interfaces.


Concept / Approach:
show access-lists lists all ACLs and their sequence of statements as currently in the running configuration. For interface attachment and counters, show ip interface can help, but does not dump full ACL contents in all cases.



Step-by-Step Solution:

Enter privileged EXEC (enable).Issue: show access-listsOptionally use: show ip interface to see where ACLs are applied; show running-config to see ACLs inline with other config.


Verification / Alternative check:
Compare the output with show running-config to verify ACL names/numbers and entries match expectations.



Why Other Options Are Wrong:

  • show interface: Physical/logical interface status, not ACL contents.
  • show ip interface (user EXEC in option text) summarizes ACL application, not full entries.
  • show all access-lists: Not a valid IOS command.
  • show run access-lists only: Not a valid IOS command.


Common Pitfalls:
Misreading counters; forgetting that ACLs are processed top-down; not checking both IPv4 and IPv6 ACLs (use respective show commands).



Final Answer:
Router# show access-lists

More Questions from Security

Discussion & Comments

No comments yet. Be the first to comment!
Join Discussion