Difficulty: Easy
Correct Answer: Router# show access-lists
Explanation:
Introduction / Context:
During troubleshooting and validation, engineers often need to see the current ACL entries exactly as the router will process them. Cisco IOS provides specific show commands for this purpose.
Given Data / Assumptions:
Concept / Approach:
show access-lists lists all ACLs and their sequence of statements as currently in the running configuration. For interface attachment and counters, show ip interface can help, but does not dump full ACL contents in all cases.
Step-by-Step Solution:
Verification / Alternative check:
Compare the output with show running-config to verify ACL names/numbers and entries match expectations.
Why Other Options Are Wrong:
Common Pitfalls:
Misreading counters; forgetting that ACLs are processed top-down; not checking both IPv4 and IPv6 ACLs (use respective show commands).
Final Answer:
Router# show access-lists
Discussion & Comments