access-list copy
Syntax
access-list {ip|ipv6|mac} <ACL-NAME> copy <DESTINATION-ACL>
Description
Copies an IPv4, IPv6, or MAC ACL to a new destination ACL or overwrites an existing ACL.
Command context
config
Parameters
{ip|ipv6|mac}Specifies the type of ACL.
<ACL-NAME>Specifies the name of the ACL to be copied.
<DESTINATION-ACL>Specifies the name of the destination ACL.
Authority
Administrators or local user group members with execution rights for this command.
Examples
Copying MY_IP_ACL to MY_IP_ACL2:
switch(config)# access-list ip MY_IP_ACL copy MY_IP_ACL2
switch(config-acl-ip)# exit
switch(config)# do show access-list
Type Name
Sequence Comment
Action L3 Protocol
Source IP Address Source L4 Port(s)
Destination IP Address Destination L4 Port(s)
Additional Parameters
-------------------------------------------------------------------------------
IPv4 MY_IP_ACL
1 permit udp
any
172.16.1.0/255.255.255.0
2 permit tcp
172.16.2.0/255.255.0.0 > 1023
any
3 permit tcp
172.26.1.0/255.255.255.0
any
dscp: AF11
ack
syn
4 deny any
any
any
Hit-counts: enabled
-------------------------------------------------------------------------------
IPv4 MY_IP_ACL2
1 permit udp
any
172.16.1.0/255.255.255.0
2 permit tcp
172.16.2.0/255.255.0.0 > 1023
any
3 permit tcp
172.26.1.0/255.255.255.0
any
dscp: AF11
ack
syn
4 deny any
any
any
Hit-counts: enabled
Copying MY_IPV6_ACL to MY_IPV6_ACL2:
switch(config)# access-list ipv6 MY_IPV6_ACL copy MY_IPV6_ACL2
switch(config-acl-ip)# exit
switch(config)# do show access-list
Type Name
Sequence Comment
Action L3 Protocol
Source IP Address Source L4 Port(s)
Destination IP Address Destination L4 Port(s)
Additional Parameters
-------------------------------------------------------------------------------
IPv6 MY_IPV6_ACL
1 permit udp
any
2001::1/64
2 Permit all TCP ephemeral ports
permit tcp
2001:2001::2:1 > 1023
any
3 permit tcp
2001:2011::1/64
any
4 deny any
any
any
Hit-counts: enabled
-------------------------------------------------------------------------------
IPv6 MY_IPV6_ACL2
1 permit udp
any
2001::1/64
2 Permit all TCP ephemeral ports
permit tcp
2001:2001::2:1 > 1023
any
3 permit tcp
2001:2011::1/64
any
4 deny any
any
any
Hit-counts: enabled
Copying MY_MAC_ACL to MY_MAC_ACL2:
switch(config)# access-list mac MY_MAC_ACL copy MY_MAC_ACL2
switch(config-acl-mac)# exit
switch(config)# do show access-list
Type Name
Sequence Comment
Action EtherType
Source MAC Address
Destination MAC Address
Additional Parameters
-------------------------------------------------------------------------------
MAC MY_MAC_ACL
1 permit ipv6
1122.3344.5566/ffff.ffff.0000
any
2 permit any
aaaa.bbbb.cccc
1111.2222.3333
QoS Priority Code Point: 4
3 Permit all vlan-1 tagged Appletalk traffic
permit appletalk
any
any
VLAN: 1
4 deny any
any
any
Hit-counts: enabled
-------------------------------------------------------------------------------
MAC MY_MAC_ACL2
1 permit ipv6
1122.3344.5566/ffff.ffff.0000
any
2 permit any
aaaa.bbbb.cccc
1111.2222.3333
QoS Priority Code Point: 4
3 Permit all vlan-1 tagged Appletalk traffic
permit appletalk
any
any
VLAN: 1
4 deny any
any
any
Hit-counts: enabled