2-641
Catalyst 6500 Series Switch Command Reference—Release8.4
OL-6244-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set security acl statistics
set security acl statistics
To enable aggregated ACL statistics on a per-ACL basis, use the set security acl statistics command.
set security acl statistics {all | acl_name}
Syntax Description
Defaults This command has no default settings.
Command Types Switch command.
Command Modes Privileged.
Usage Guidelines In aggregated statistics mode, the statistics are enabled for all the ACEs in the specified ACL. This
command is effective only after you enter the commit command to commit all ACEs to NVRAM.
This command overwrites the per-ACE command, set security acl ip/mac acl_name … [statistics].
The aggregated statistics mode disables the merge optimization and can result in a larger number of
ACEs. In some cases, an ACL that was previously installed in the TCAM might not f it in the TCAM after
aggregated statistics mode is enabled.
Note With a PFC2, the counters report if a particular ACE was hit during a 300 ms window, but the counters
do not indicate how much traffic hit the entry. For e xample, if you ha ve tw o flows where one flo w is 1000
packets per second and the second flow is 10 packets per second, both flows return the same result on a
PFC2. The PFC3 and later PFCs do not have this limitation.
Examples This example shows how to enable aggregated ACL statistics on a per-ACL basis:
Console> (enable) set security acl statistics ACL1
ACL1 editbuffer modified. Use 'commit' command to save changes.
Console> (enable) commit security acl ACL1
ACL commit in progress.
ACL 'ACL1' successfully committed.
Console> (enable)
Related Commands clear security acl counters
clear security acl statistics
all Enables aggregated ACL statistics on all ACLs.
acl_name Name of the ACL.