Netgear XSM4348CS CLI Manual Software Version 12.x - Page 979

M4300 Intelligent Edge Series Fully Managed Stackable Switches Term Definition Rule Status Status (Active/Inactive) of the IP ACL rule. ACL Hit Count The number of packets that match a configured ACL rule within an ACL (referred to as ACL hit count). The counter resets to 0 when the maximum value is reached. A dedicated counter exists for each ACL rule. ACL counters do not interact with PBR counters. For an ACL with multiple rules, if a match occurs for a specific rule, the counter that is associated with this rule increments. For example, if an ACL includes three rules, when a match occurs for rule 2, the counter for rule 3 does not increment. For ACL counters, if an ACL rule is configured without a rate limit condition, the counter shows the number of forwarded and or discarded packets. (For example, for a burst of 100 packets, the counter shows 100.) If the ACL rule is configured with a rate limit condition, the counter shows the number of packets that match the condition: • If the packets are sent at a rate that is lower than the configured rate limit, the counter displays the number of packets that match the condition. • If the packets are sent at a rate that exceeds the configured rate limit, the counter still displays the number of packets that match the condition, even though packets are dropped beyond the configured limit. In this situation, the number of packets that match the condition equals the rate at which the packets are sent. For example, if the rate limit condition is 10 kbps but the matching traffic is sent at 100 kbps, the counter increments with 100 kbps. Either way, only the number of packets that match the condition is reflected in the counter, irrespective of whether they are dropped or forwarded. ACL counters do not interact with diffserv policies. (NETGEAR Switch) #show ip access-lists ip1 ACL Name: ip1 Inbound Interface(s): 1/0/30 Rule Number: 1 Action permit Match All FALSE Protocol 1(icmp) Committed Rate 32 Committed Burst Size 16 ACL hit count 0 show access-lists This command displays IP ACLs, IPv6 ACLs, and MAC access control lists information for a designated interface and direction. The unit/slot/port parameter specifies a valid interface for the system. Instead of unit/slot/port, lag lag-intf-num can be used as an alternate way to specify the LAG interface, in which lag-intf-num is the LAG port number. Quality of Service Commands 979 CLI Command Reference Manual