Blade ICE G8000 manual Viewing ACL statistics

RackSwitch G8000 Application Guide

NOTE – To ensure your ACLs function properly, do not assign the same ACL to different ports using different filtering directions. It is recommended that you create two ACLs, one for ingress traffic, and one for egress traffic.

To assign an ACL to a port:

RS G8000		(config)# interface port 1
RS	G8000	(config-if)#	ip access-group 1001 in
RS	G8000	(config-if)#	exit

To delete an ACL from a port:

RS G8000		(config)# interface port 1
RS	G8000	(config-if)#	no ip access-group 1001 in
RS	G8000	(config-if)#	exit

Each port retains its assigned ACLs, even if the port becomes a member of a trunk group (portchannel).

Viewing ACL statistics

ACL statistics display how many packets hit (matched) each ACL. Use ACL statistics to check filter performance, and debug the ACL filters. You must enable statistics for each ACL that you want to monitor. Use the following command to enable statistics for the ACL:

RS G8000 (config)# access-list ip standard 1 statistics

Use the following command to view ACL statistics:

RS G8000 (config)# show access-list counters

BMD00041, November 2008 Chapter 6: Quality of Service „ 99