show access-list accounting
Displays the access control list (ACL) accounting statistics for IPv4 ACLs, IPv6 ACLs,
and Layer 2 MAC ACLs.
Syntax
show access-list
accounting
{
ethernet
id
|
lag
id
|
vlan
id
}
[
in
|
out
]
[
ipv4
|
ipv6
|
mac
]
[
brief
|
detail
]
show access-list
accounting
{
ethernet
id
|
lag
id
|
vlan
id
}
[
in
]
[
brief
|
detail
]
show access-list
accounting
vlan
id
lag
id
[
in
]
[
ipv4
|
ipv6
|
mac
]
[ detail ]
Parameters
- in
- Displays the statistics of the inbound ACLs. If no direction is set, statistics for both inbound and outbound are shown, if available.
- out
- Displays the statistics of the outbound ACLs. If no direction is set, statistics for both inbound and outbound are shown, if available.
- ipv4
- Displays the statistics for IPv4 ACLs. Statistics for both IPv4, IPv6, MAC ACLs are shown if this value is not set.
- ipv6
- Displays the statistics for IPv6 ACLs. Statistics for IPv4, IPv6,and MAC ACLs are shown if this value is not set.
Modes
All modes
Usage Guidelines
The output displayed gives information about ACLs based on the configuration of the port or interface. If both IPv4 and IPv6 ACLs are configured on the same port, the output provides IPv4, IPv6, and MAC ACL accounting information, unless only IPv4, IPv6, or MAC is specified in the command.
You can display information for an entire VLAN or for a LAG within the VLAN. Use the
show access-list accounting
vlan
id
lag
id
in detail
command form to display information about a specific LAG within the context of the
VLAN.
Examples
The following example displays a summary of ACLs that are active on VLAN 333.
device# show access-list accounting vlan 333 in brief ACL Accounting Table ========================================================================================================================================================== UnitID: 1 ACL Name: mirror_acl_l2 HitCnt: 0 ByteCnt: 0 UnitID: 1 ACL Name: mirror_acl_ipv4 HitCnt: 0 ByteCnt: 0 UnitID: 1 ACL Name: mirror_acl_ipv6 HitCnt: 0 ByteCnt: 0 UnitID: 2 ACL Name: mirror_acl_l2 HitCnt: 0 ByteCnt: 0 UnitID: 2 ACL Name: mirror_acl_ipv4 HitCnt: 0 ByteCnt: 0 UnitID: 2 ACL Name: mirror_acl_ipv6 HitCnt: 0 ByteCnt: 0 UnitID: 3 ACL Name: mirror_acl_l2 HitCnt: 0 ByteCnt: 0 UnitID: 3 ACL Name: mirror_acl_ipv4 HitCnt: 0 ByteCnt: 0 UnitID: 3 ACL Name: mirror_acl_ipv6 HitCnt: 0 ByteCnt: 0
The following example displays a summary of IPv4 ACLs on VLAN 333.
device# show access-list accounting vlan 333 in ipv4 brief ACL Accounting Table ========================================================================================================================================================== UnitID: 1 ACL Name: mirror_acl_ipv4 HitCnt: 0 ByteCnt: 0 UnitID: 2 ACL Name: mirror_acl_ipv4 HitCnt: 0 ByteCnt: 0 UnitID: 3 ACL Name: mirror_acl_ipv4 HitCnt: 0 ByteCnt: 0
The following example displays a summary of IPv6 ACLs on VLAN 333.
device# show access-list accounting vlan 333 in ipv6 brief ACL Accounting Table ========================================================================================================================================================== UnitID: 1 ACL Name: mirror_acl_ipv6 HitCnt: 0 ByteCnt: 0 UnitID: 2 ACL Name: mirror_acl_ipv6 HitCnt: 0 ByteCnt: 0 UnitID: 3 ACL Name: mirror_acl_ipv6 HitCnt: 0 ByteCnt: 0
The following example displays detailed information for ACLs applied to LAG 25 in VLAN 333.
device# show access-list accounting vlan 333 lag 25 in detail ACL Accounting Table ========================================================================================================================================================== ACL Name: vlan333-ipv4 UnitID: 2 Region: 0 Filter Seq Num: 5 Filter Def: deny tcp 44.44.44.0 0.0.0.255 any log HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 12 Filter Def: permit ip 32.32.32.0 0.0.0.255 any log HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 14 Filter Def: deny ip host 13.13.13.10 any log HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 24 Filter Def: deny tcp 32.32.32.0 0.0.0.255 range 10 20 any range 50 60 mi HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 36 Filter Def: permit udp any any log mirror HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter SeUnitID: 2 Region: 0 Filter Seq Num: 228 Filter Def: permit tcp host 33.3.4.82 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 240 Filter Def: permit tcp host 33.3.4.83 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 252 Filter Def: permit tcp host 33.3.4.85 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 264 Filter Def: permit tcp host 33.3.4.86 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 276 Filter Def: permit tcp host 33.3.4.87 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 288 Filter Def: permit tcp host 33.3.4.88 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 300 Filter Def: permit tcp host 33.3.4.89 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 312 Filter Def: permit tcp host 33.3.4.90 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 324 Filter Def: permit tcp host 33.3.4.91 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 336 Filter Def: permit tcp host 33.3.4.92 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 348 Filter Def: permit tcp host 33.3.4.93 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 672 Filter Def: permit tcp host 1234::19 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 684 Filter Def: permit tcp host 1234::20 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 696 Filter Def: permit tcp host 1234::21 any HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 708 Filter Def: permit tcp host 1234::22 any HitCnt: 0 ByteCnt: 0
The following example displays detailed information on IPv6 ACLs applied to LAG 25 in VLAN 333.
device# show access-list accounting vlan 333 lag 25 in ipv6 detail ACL Accounting Table ========================================================================================================================================================== ACL Name: vlan333-ipv6 UnitID: 2 Region: 0 Filter Seq Num: 2 Filter Def: permit ipv6 host 3332::100 any log HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 3 Filter Def: permit udp any any log mirror HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 6 Filter Def: permit ipv6 host 3332::100 any dscp-matching 33 802.1p-prior HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 12 Filter Def: deny tcp host 3332::100 any mirror HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 13 Filter Def: deny ipv6 host 1221::100 any log HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 14 Filter Def: deny udp host 1221::100 any log HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 15 Filter Def: deny tcp host 1221::100 any log HitCnt: 0 ByteCnt: 0 UnitID: 2 Region: 0 Filter Seq Num: 24 Filter Def: permit ipv6 host 3332::100 any HitCnt: 0 ByteCnt: 0
History
| Release version | Command history |
|---|---|
| 08.0.10 | This command was introduced. |
| 08.0.61 | This command was modified to add lag lag-id options. |
| 08.0.70 | This command was modified to support outbound ACL accounting for IPv4 and IPv6 ACLs. |
| 08.0.95 | This command was modified to remove the id, traffic-policy, and ve options. It was also modified to improve the presentation of accounting details. |