Cisco WS-C6506 User Manual

15-86
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 15 Configuring Access Control
Configuring ACL Statistics
Displaying ACL Statistics Information
Use the commands described in this section to display information about the ACL statistics:
• show security acl info acl_name [statistics [ace_index]]
Displays the statistics for the specified ACL. The ace_index is the index in the ACL list (committed
ACLs).
An example is as follows:
Console> (enable) show security acl info ACL1 statistics
Vlan: 1
set security acl ip ACL1 statistics
---------------------------------------------------
arp permit in: 132 out: 132
1. permit ip any any
2. permit ip any any statistics in: 0 out: 0
Console> (enable)
• show security acl tcam interface vlan
Displays the TCAM details for the specified VLAN.
An example is as follows:
Console> (enable) show security acl tcam interface 1
Input
0. permit arp (matches 45745)
1. deny (l3) tcp any any fragment (matches 0)
2. deny (l3) ip host 21.0.0.130 any (matches 0)
3. deny (l3) udp 1.2.2.0 0.0.0.255 any (matches 0)
4. deny (l3) tcp any any 2001 (matches 0)
5. deny (l3) ip host 21.0.0.128 any (matches 0)
6. deny ip any any (matches 3)
Output
0. permit arp (matches 0)
1. deny (l3) tcp any any fragment (matches 0)
2. deny (l3) ip host 21.0.0.130 any (matches 0)
3. deny (l3) udp 1.2.2.0 0.0.0.255 any (matches 0)
4. deny (l3) tcp any any 2001 (matches 0)
5. deny (l3) ip host 21.0.0.128 any (matches 0)
6. deny (l3) ip any any (matches 0)
Console> (enable)
The fields are described as follows:
– deny (l3): Layer 3 traffic is denied; Layer 2 traffic is permitted.
– redirect (l3): Only Layer 3 traffic is redirected.
– bridge: Traffic that hits this entry is bridged.
– Redirect (adj): Traffic is rewritten by the adjacency information.
• show security acl and show security acl map acl_name
A new field is added to these commands to display the type of statistics that are enabled for a specific
ACL or VLAN.
An example is as follows:
Console> (enable) show security acl
Information in the bracket.

Cisco WS-C6506 Specifications

General

Brand	Cisco
Model	WS-C6506
Category	Switch
Language	English