
9
name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to
63 characters. It must start with an English letter.
brief: Displays brief statistics.
Usage guidelines
When none of acl-number and name acl-name is specified, this command displays match statistics of all
ACLs for packet filtering.
• If the ipv6 keyword is not specified, all ACLs refer to all IPv4 basic, IPv4 advanced, and Ethernet
frame header ACLs.
• If the ipv6 keyword is specified, all ACLs refer to all IPv6 basic and IPv6 advanced ACLs.
Examples
# Display match statistics of all ACLs (IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs) for
incoming packet filtering on FortyGigE 1/1/1.
<Sysname> display packet-filter statistics interface fortygige 1/1/1 inbound
Interface: FortyGigE1/1/1
In-bound policy:
ACL 2001, Hardware-count
From 2011-06-04 10:25:21 to 2011-06-04 10:35:57
rule 0 permit source 2.2.2.2 0
rule 5 permit source 1.1.1.1 0
Totally 0 packets permitted, 0 packets denied
Totally 0% permitted, 0% denied
IPv4 default action: Deny
Table 3 Command output
Field Descri
tion
Interface Interface to which the ACL applies.
In-bound policy ACL used for filtering incoming traffic.
Out-bound policy ACL used for filtering outgoing traffic.
ACL 2001 IPv4 basic ACL 2001 has been successfully applied.
Hardware-count Successfully enables counting ACL rule matches.
From 2011-06-04 10:25:21 to
2011-06-04 10:35:57
Start time and end time of the statistics.
Totally 0 packets permitted, 0 packets
denied
Number of packets permitted and denied by the ACL.
Totally 0% permitted, 0% denied Ratios of permitted and denied packets to all packets.
IPv4 default action
Packet filter default action for packets that do not match any IPv4
ACLs. This field is displayed only when the default action is deny.
IPv6 default action
Packet filter default action for packets that do not match any IPv6
ACLs. This field is displayed only when the default action is deny.
MAC default action
Packet filter default action for packets that do not match any
Ethernet frame header ACLs. This field is displayed only when the
default action is deny.
Kommentare zu diesen Handbüchern