ACL Accounting

ACL accounting helps to collect usage information for access control lists configured on the ICX device.

Counters, stored in hardware, keep track of the number of times an ACL filter is used. ACL accounting provides statistics for permit rules, deny rules, and implicit rules that help in identifying usage of particular traffic. ACL accounting is supported on IPv4 ACLs, IPv6 ACLs, and Layer 2 MAC ACLs and provides accounting information for inbound and outbound ACLs.

Note: IPv4 and IPv6 ACL accounting are supported in Policy-based Routing (PBR).

Limitations for ACL Accounting

  • Traffic Policer and ACL accounting cannot coexist.
  • ACL accounting is not supported on dynamic ACLs.
  • ACL accounting is not supported on management interfaces.
  • ACL accounting is not supported with IP Source Guard (IPSG).

In this section:

  1. Changing the Accounting Period
  2. Configuring ACL Accounting
    If you enable accounting for an ACL, it applies to all rules in that ACL, including implicit rules.
Parent topic: ACLs