HP 6125XLG R2306-HP 6125XLG Blade Switch ACL and QoS Command Reference - Page 11

display packet-filter, Usage guidelines, Examples, Syntax

Page 11 highlights

all: Displays information about all IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs if you do not specify the ipv6 keyword, or displays information about all IPv6 basic and IPv6 advanced ACLs if you specify the ipv6 keyword. name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to 63 characters. It must start with an English letter. For a basic ACL or advanced ACL, if you do not specify the ipv6 keyword, this option specifies the name of an IPv4 basic ACL or advanced ACL. If you specify the ipv6 keyword, this option specifies the name of an IPv6 basic ACL or advanced ACL. Usage guidelines This command displays ACL rules in config or depth-first order, whichever is configured. Examples # Display configuration and match statistics for IPv4 basic ACL 2001. display acl 2001 Basic ACL 2001, named flow, 1 rule, match-order is auto, This is an IPv4 basic ACL. ACL's step is 5 rule 5 permit source 1.1.1.1 0 (5 times matched) rule 5 comment This rule is used on FortyGigE 1/1/1. Table 1 Command output Field Description Basic ACL 2001 Category and number of the ACL. The following field information is about IPv4 basic ACL 2000. named flow The name of the ACL is flow. If the ACL is not named, this field displays -none-. 1 rule The ACL contains one rule. match-order is auto The match order for the ACL is auto, which sorts ACL rules in depth-first order. This field is not present when the match order is config. This is an IPv4 basic ACL. Description of this ACL. ACL's step is 5 The rule numbering step is 5. rule 5 permit source 1.1.1.1 0 Content of rule 5. 5 times matched There have been five matches for the rule. The statistic counts only ACL matches performed in software. This field is not displayed when no packets matched the rule. rule 5 comment This rule is used on FortyGigE 1/1/1. Comment of ACL rule 5. display packet-filter Use display packet-filter to display whether an ACL has been successfully applied to an interface for packet filtering. Syntax display packet-filter { interface [ interface-type interface-number ] [ inbound | outbound ] | interface vlan-interface vlan-interface-number [ inbound | outbound ] [ slot slot-number ] } 6

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114

6
all
: Displays information about all IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs if you do
not specify the
ipv6
keyword, or displays information about all IPv6 basic and IPv6 advanced ACLs if
you specify the
ipv6
keyword.
name
acl-name
: Specifies an ACL by its name. The
acl-name
argument is a case-insensitive string of 1 to
63 characters. It must start with an English letter. For a basic ACL or advanced ACL, if you do not specify
the
ipv6
keyword, this option specifies the name of an IPv4 basic ACL or advanced ACL. If you specify
the
ipv6
keyword, this option specifies the name of an IPv6 basic ACL or advanced ACL.
Usage guidelines
This command displays ACL rules in config or depth-first order, whichever is configured.
Examples
# Display configuration and match statistics for IPv4 basic ACL 2001.
<Sysname> display acl 2001
Basic ACL
2001, named flow, 1 rule, match-order is auto,
This is an IPv4 basic ACL.
ACL's step is 5
rule 5 permit source 1.1.1.1 0 (5 times matched)
rule 5 comment This rule is used on FortyGigE 1/1/1.
Table 1
Command output
Field
Description
Basic ACL
2001
Category and number of the ACL. The following field information is about
IPv4 basic ACL 2000.
named flow
The name of the ACL is flow. If the ACL is not named, this field displays
-none-
.
1 rule
The ACL contains one rule.
match-order is auto
The match order for the ACL is auto, which sorts ACL rules in depth-first
order. This field is not present when the match order is config.
This is an IPv4 basic ACL.
Description of this ACL.
ACL's step is 5
The rule numbering step is 5.
rule 5 permit source 1.1.1.1 0
Content of rule 5.
5 times matched
There have been five matches for the rule. The statistic counts only ACL
matches performed in software.
This field is not displayed when no packets matched the rule.
rule 5 comment This rule is used
on FortyGigE 1/1/1.
Comment of ACL rule 5.
display packet-filter
Use
display packet-filter
to display whether an ACL has been successfully applied to an interface for
packet filtering.
Syntax
display
packet-filter
{
interface
[
interface-type
interface-number
] [
inbound
|
outbound
] |
interface
vlan-interface
vlan-interface-number
[
inbound
|
outbound
] [
slot
slot-number
] }