when you are troubleshooting an ACL issue on a router,which command can help you to verify which interfaces are affected by the ACL?
A.
showaccess-lists
B.
show interface
C.
show ip interface
D.
show ip access-lists
E.
list ip interface
which interfaces are affected by the ACL?
when you are troubleshooting an ACL issue on a router,which command can help you to verify which interfaces are affected by the ACL?
Answer :C
Router#show interfaces f0/1
FastEthernet0/1 is up, line protocol is up (connected)
Hardware is Lance, address is 0002.172b.b702 (bia 0002.172b.b702)
Internet address is 172.22.242.30/28
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
ARP type: ARPA, ARP Timeout 04:00:00,
Last input 00:00:08, output 00:00:05, output hang never
Last clearing of “show interface” counters never
Input queue: 0/75/0 (size/max/drops); Total output drops: 0
Queueing strategy: fifo
Output queue :0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
Router#show ip interface f0/1
FastEthernet0/1 is up, line protocol is up (connected)
Internet address is 172.22.242.30/28
Broadcast address is 255.255.255.255
Address determined by setup command
MTU is 1500
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is 100
Inbound access list is not set
Proxy ARP is enabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is disabled
IP fast switching on the same interface is disabled
IP Flow switching is disabled
IP Fast switching turbo vector
IP multicast fast switching is disabled
IP multicast distributed fast switching is disabled
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Probe proxy name replies are disabled
Policy routing is disabled
Network address translation is disabled
WCCP Redirect outbound is disabled
WCCP Redirect exclude is disabled
BGP Policy Mapping is disabled
Router#
Router#
Router#
Router#show ip access-lists
Extended IP access list 100
permit tcp host 192.168.33.3 host 172.242.22.33 eq www
Router#
I confirm what you say Hima.
http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml
Yes what hima said is CORRECT becz “show ip access-lists” shows only the access list and DOESN’T show the respective interface(s).
Answer is : C
Because..
#Show ip access-list (does not show interfaces affected by an’ACL)
Refer to CCNA: Cisco Certified Network Associate Review Guide: Exam 640-802 book page 288
https://books.google.com/books?id=LslD0RyrpPYC&pg=PA288&lpg=PA288&dq=When+you+are+troubleshooting+an+ACL+issue+on+a+router,+which+command+would+you+use+to+verify&source=bl&ots=PQo8p2cnfO&sig=xcV4y0m0UwZh5Fh_Wydr7pzADtM&hl=en&sa=X&ei=W9WZVIS8NtWHsQStu4C4BQ&ved=0CDQQ6AEwAw#v=onepage&q=When%20you%20are%20troubleshooting%20an%20ACL%20issue%20on%20a%20router%2C%20which%20command%20would%20you%20use%20to%20verify&f=false
C is indeed correct
of course the answer is C
C.
show ip interface
Inbound access list is not set/set