# Task: ACL — v7.8.0

**Version:** 7.8.0
**Category:** Security
**Description:** ACL definitions and interfaces
**New in this version:** No
**IPv6 Support:** Yes
**URL:** https://feature-matrix-imenovsky01a.user.ipf.cx/7.8.0/task/129978148

---

## Vendor Support Matrix

| Vendor / Family | Status | IPv6 | Notes |
|-----------------|--------|------|-------|
| aws | ✓ | ✓ |  |
| alcatel@aos | ✗ | ✗ |  |
| azure | ✓ | ✗ |  |
| brocade@fastiron | ✗ | ✗ |  |
| cisco@ios | ✓ | ✓ |  |
| cisco@ios-xe | ✓ | ✓ |  |
| cisco@nx-os | ✓ | ✓ |  |
| cisco@ios-xr | ✓ | ✗ |  |
| cisco@asa | ✓ | ✓ |  |
| cisco@wlc-air | ✗ | ✗ |  |
| cisco@sg | ✓ | ✗ |  |
| cisco@ftd | ✗ | ✗ |  |
| cisco@aci | ✓ | ✗ |  |
| cisco@meraki | ✗ | ✗ |  |
| cisco@viptela | ✓ | ✗ |  |
| cisco@apic | ○ | ○ |  |
| cisco@encs | ✗ | ✗ |  |
| dell@ftos | ○ | ○ |  |
| dell@powerconnect | ○ | ○ |  |
| dell@os10 | ○ | ○ |  |
| fs@fsos | ✗ | ✗ |  |
| gcp | ✓ | ✗ |  |
| hpe@comware | ✓ | ✗ |  |
| hpe@aruba | ✗ | ✗ |  |
| hpe@arubasw | ✗ | ✗ |  |
| hpe@arubacx | ✓ | ✗ |  |
| hpe@3com | ✗ | ✗ |  |
| hpe@aruba-iap | ○ | ○ |  |
| riverbed@steelhead | ○ | ○ |  |
| fortinet@fortigate | ○ | ○ |  |
| fortinet@fortiswitch | ✗ | ✗ |  |
| forcepoint@ngfw | ✗ | ✗ |  |
| paloalto@pan-os | ○ | ○ |  |
| paloalto@prisma | ○ | ○ |  |
| juniper@junos | ✓ | ✗ |  |
| juniper@mist | ○ | ○ |  |
| checkpoint@gaia | ○ | ○ |  |
| checkpoint@gaia-embedded | ○ | ○ |  |
| extreme@boss | ○ | ○ |  |
| extreme@enterasys | ○ | ○ |  |
| extreme@voss | ✗ | ✗ |  |
| extreme@exos | ✓ | ✓ |  |
| arista@eos | ✓ | ✗ |  |
| f5@big-ip | ○ | ○ |  |
| f5@f5osa | ○ | ○ |  |
| f5@f5osc | ○ | ○ |  |
| huawei@vrp | ○ | ○ |  |
| mikrotik@routeros | ○ | ○ |  |
| quagga | ○ | ○ |  |
| frr | ○ | ○ |  |
| versa@vos | ○ | ○ |  |
| silverpeak@unity | ✗ | ✗ |  |
| vmware@nsx-t | ✓ | ✓ |  |
| vmware@velocloud | ✗ | ✗ |  |
| ruckus@vsz | ✗ | ✗ |  |
| opengear@og | ✗ | ✗ |  |
| opengear@og-om | ✗ | ✗ |  |
| stormshield@sn | ○ | ○ |  |
| nokia@timos | ✗ | ✗ |  |
| citrix@adc | ✗ | ✗ |  |

---

## CLI Commands

| Vendor / Family | Command | Notes |
|-----------------|---------|-------|
| cisco@ios | `show ip interface` |  |
| cisco@viptela | `GET /dataservice/template/policy/definition/acl/<aclId>` |  |
| extreme@exos | `debug vlan show vlans` |  |
| extreme@exos | `show vlan detail` |  |
| extreme@exos | `show access-list <any\|port\|vlan> <id> <direction> detail` |  |
| extreme@exos | `show access-list` |  |
| cisco@sg | `show access-list` |  |
| cisco@sg | `show interfaces access-lists` |  |
| cisco@ios-xr | `show ipv4 vrf all interface` |  |
| cisco@ios-xr | `show running-config` |  |
| cisco@ios-xe | `show object-group` |  |
| cisco@ios-xe | `show ip interface` |  |
| cisco@ios-xe | `show ip access-list` |  |
| cisco@ios | `show object-group` |  |
| cisco@viptela | `GET /dataservice/template/policy/definition/acl` |  |
| cisco@ios | `show ip access-list` |  |
| gcp | `GET compute.googleapis.com/compute/v1/projects/<project>/global/networks` |  |
| gcp | `GET compute.googleapis.com/compute/v1/projects/<project>/aggregated/instances` |  |
| gcp | `GET compute.googleapis.com/compute/v1/projects/<project>/aggregated/subnetworks` |  |
| gcp | `GET compute.googleapis.com/compute/v1/projects/<project>/global/firewalls` |  |
| cisco@nx-os | `show ipv6 access-lists` |  |
| cisco@nx-os | `show object-group` |  |
| cisco@nx-os | `show access-list summary` |  |
| cisco@nx-os | `show ip access-list` |  |
| cisco@asa | `show dns` |  |
| cisco@asa | `show running-config all object` |  |
| cisco@asa | `show ipv6 interface` |  |
| cisco@asa | `show interface detail` |  |
| vmware@nsx-t | `GET /api/v1/logical-routers` |  |
| vmware@nsx-t | `GET /api/v1/ns-services` |  |
| vmware@nsx-t | `GET /policy/api/v1/infra/segments` |  |
| vmware@nsx-t | `GET /api/v1/firewall/sections?type=LAYER2` |  |
| vmware@nsx-t | `GET /api/v1/firewall/sections/<section-id>/rules?sort_by=priority` |  |
| vmware@nsx-t | `GET /api/v1/firewall/sections` |  |
| vmware@nsx-t | `GET /api/v1/ip-sets` |  |
| vmware@nsx-t | `GET /api/v1/ns-groups/<group-id>/effective-logical-switch-members` |  |
| vmware@nsx-t | `GET /api/v1/ns-groups/<group-id>/effective-ipset-members` |  |
| vmware@nsx-t | `GET /api/v1/ns-groups/<group-id>/effective-ip-address-members` |  |
| vmware@nsx-t | `GET /api/v1/ns-groups` |  |
| vmware@nsx-t | `GET /api/v1/logical-ports/<portId>/state` |  |
| vmware@nsx-t | `GET /api/v1/fabric/virtual-machines` |  |
| vmware@nsx-t | `GET /api/v1/fabric/vifs` |  |
| cisco@asa | `show interface` |  |
| vmware@nsx-t | `GET /api/v1/logical-router-ports?logical_router_id=<router-id>` |  |
| vmware@nsx-t | `GET /policy/api/v1/infra/segments/<segment-id>/ports/<segment-id>` |  |
| vmware@nsx-t | `GET /api/v1/logical-ports` |  |
| cisco@viptela | `GET /dataservice/template/policy/list/vpn` |  |
| cisco@viptela | `GET /dataservice/template/policy/list/site` |  |
| cisco@viptela | `GET /dataservice/template/policy/list/app` |  |
| cisco@viptela | `GET /dataservice/template/config/attached/<uuid>?type=CFS` |  |
| cisco@viptela | `GET /dataservice/device/bfd/sessions?deviceId=<deviceId>` |  |
| cisco@viptela | `GET /dataservice/device/interface?deviceId=<deviceId>` |  |
| cisco@viptela | `GET /dataservice/template/policy/definition/data/<policyId>` |  |
| cisco@viptela | `GET /dataservice/template/policy/vsmart` |  |
| cisco@viptela | `GET /dataservice/device/policy/accesslistassociations?deviceId=<deviceId>` |  |
| cisco@viptela | `GET /dataservice/template/policy/list/dataprefix` |  |
| azure | `GET /firewallPolicies/<policyId>/ruleCollectionGroups` |  |
| hpe@comware | `display packet-filter interface` |  |
| hpe@comware | `display packet-filter all` |  |
| hpe@comware | `display acl all` |  |
| juniper@junos | `show configuration interfaces \| display inheritance` |  |
| juniper@junos | `show configuration policy-options \| display inheritance` |  |
| juniper@junos | `show configuration firewall \| display inheritance` |  |
| azure | `GET /virtualNetworks` |  |
| azure | `GET /virtualMachineScaleSets/<vmssName>networkInterfaces/` |  |
| azure | `GET /networkSecurityGroups` |  |
| azure | `GET /networkInterfaces` |  |
| azure | `GET /location/<locationName>/serviceTags` |  |
| azure | `GET /loadBalancers` |  |
| azure | `GET /ipGroups` |  |
| hpe@comware | `display object-group` |  |
| azure | `GET /firewallPolicies` |  |
| azure | `GET /azureFirewalls/<azureFirewallName>/learnedIPPrefixes` |  |
| azure | `GET /azureFirewalls` |  |
| aws | `SDK ec2:GetManagedPrefixListEntriesCommand` |  |
| aws | `SDK ec2:DescribeVpcs` |  |
| aws | `SDK ec2:DescribeSecurityGroupRulesCommand` |  |
| aws | `SDK ec2:DescribeSecurityGroupsCommand` |  |
| aws | `SDK ec2:DescribePrefixListsCommand` |  |
| aws | `SDK ec2:DescribeNetworkInterfacesCommand` |  |
| aws | `SDK ec2:DescribeNetworkAclsCommand` |  |
| aws | `SDK ec2:DescribeManagedPrefixListsCommand` |  |
| arista@eos | `show ip access-lists summary` |  |
| arista@eos | `show ip access-lists` |  |
| cisco@aci | `GET /api/node/class/fvTenant.json?rsp-subtree=full&rsp-subtree-class=vzBrCP,fvBD,vzFilter,fvAp,fvCtx,fvAEPg,l2extInstP,l3extInstP,mgmtOoB,mgmtInB` |  |
| cisco@asa | `show run` |  |
| cisco@aci | `GET /api/node/class/vzFilter.json&rsp-subtree=full&rsp-subtree-class=vzFilter,vzEntry` |  |
| cisco@aci | `GET /api/node/class/vzBrCP.json&rsp-subtree=full&rsp-subtree-class=vzSubj,vzRsSubjFiltAtt` |  |
| cisco@aci | `GET /api/node/class/mgmtOoB.json` |  |
| cisco@aci | `GET /api/node/class/mgmtInB.json` |  |
| cisco@aci | `GET /api/node/class/l3extInstP.json?rsp-subtree=full&rsp-subtree-class=fvRsProv,fvRsCons,l3extSubnet` |  |
| cisco@aci | `GET /api/node/class/l2extInstP.json&rsp-subtree=full&rsp-subtree-class=fvRsProv,fvRsCons` |  |
| cisco@aci | `GET /api/node/class/fvCtx.json&rsp-subtree=full&rsp-subtree-class=fvCtx,fvRtCtx` |  |
| cisco@aci | `GET /api/node/class/fvBD.json&rsp-subtree=full&rsp-subtree-class=fvSubnet,fvRtBd,l3extSubnet` |  |
| cisco@aci | `GET /api/node/mo/<fvAp.dn>.json?rsp-subtree=full&rsp-subtree-class=fvAp,fvAEPg,fvAp,fvCEp,fvRsProv,fvIp,fvESg,fvRsCons` |  |
| cisco@aci | `GET /api/node/class/fvAp.json` |  |
| cisco@aci | `GET /api/node/class/fabricNode.json` |  |
| cisco@aci | `GET /api/node/class/actrlRule.json?order-by=actrlRule.prio&rsp-subtree=full` |  |
| arista@eos | `show running-config` |  |
| cisco@aci | `show ipv6 interface vrf all` |  |
| cisco@aci | `show interface` |  |
| cisco@aci | `show hsrp brief` |  |
| cisco@aci | `show ip interface vrf all` |  |
| cisco@aci | `show inventory` |  |
| cisco@aci | `show version` |  |
| cisco@aci | `show isis dteps vrf overlay-1` |  |
| cisco@aci | `show coop internal info ip-db` |  |
| cisco@aci | `show system internal epm vrf all` |  |
| cisco@aci | `show system internal epm vlan all` |  |
| cisco@aci | `show endpoint detail` |  |
| hpe@arubacx | `show running-config` |  |

---

## Legend

- **✓** = Fully Integrated
- **✗** = Not Yet Integrated
- **○** = Not Available

*Generated: 2026-04-16T18:55:38.566Z*
