ACL Referencing: Example
ACL Referencing: Example
This example shows how to reference access-lists on a number of interfaces using configuration groups.
1 Configure the configuration group and apply-group:
RP/0/RSP0/CPU0:router# show running group acref
group acref
end-group
RP/0/RSP0/CPU0:router# show running | inc apply-group
Building configuration...
apply-group isis l2tr isis2 mpp bundle1 acref
2 Check the concise and inheritance view of the matching configurations:
RP/0/RSP0/CPU0:router# show running interface gigabitEthernet 0/0/0/30
interface GigabitEthernet0/0/0/30
!
RP/0/RSP0/CPU0:router# show running inheritance interface GigabitEthernet 0/0/0/30
interface GigabitEthernet0/0/0/30
!
RP/0/RSP0/CPU0:router# show running interface gigabitEthernet 0/0/0/31
interface GigabitEthernet0/0/0/31
!
RP/0/RSP0/CPU0:router# show running inheritance interface GigabitEthernet 0/0/0/31
interface GigabitEthernet0/0/0/31
Cisco ASR 9000 Series Aggregation Services Router System Management Configuration Guide, Release 5.1.x
146
Outer Match: Dot1Q VLAN 250
Ethertype Any, MAC Match src any, dest any
loopback not set,
Last input never, output never
Last clearing of "show interface" counters never
0 packets input, 0 bytes
0 input drops, 0 queue drops, 0 input errors
0 packets output, 0 bytes
0 output drops, 0 queue drops, 0 output errors
interface 'GigabitEthernet0/0/0/3.*'
ipv4 access-group adem ingress
ipv4 access-group adem egress
!
## Inherited from group l2tr
mtu 1500
## Inherited from group acref
ipv4 access-group adem ingress
## Inherited from group acref
ipv4 access-group adem egress
## Inherited from group l2tr
mtu 1500
## Inherited from group acref
ipv4 access-group adem ingress
## Inherited from group acref
ipv4 access-group adem egress
Configuring Flexible Command Line Interface Configuration Groups