Displaying And Clearing Vacl Statistics; Example Configuration For Vacl; Default Acl Settings - Cisco Nexus 5000 Series Configuration Manual

Configuring Access Control Lists
DETAILED STEPS
Command or Action
Step 1
switch# show running-config aclmgr
Step 2 switch# show vlan filter
Step 3 switch# show vlan access-map

Displaying and Clearing VACL Statistics

To display or clear VACL statistics, perform one of the following tasks:
SUMMARY STEPS
1. switch# show vlan access-list
2. switch# clear vlan access-list counters
DETAILED STEPS
Command or Action
Step 1 switch# show vlan access-list
Step 2 switch# clear vlan access-list counters

Example Configuration for VACL

This example shows how to configure a VACL to forward traffic permitted by an IP ACL named acl-ip-01
and how to apply the VACL to VLANs 50 through 82:
switch# configure terminal
switch(config)# vlan access-map acl-ip-map
switch(config-access-map)# match ip address acl-ip-01
switch(config-access-map)# action forward
switch(config-access-map)# exit
switch(config)# vlan filter acl-ip-map vlan-list 50-82

Default ACL Settings

The following table lists the default settings for IP ACLs parameters.
OL-20919-01
Purpose
Displays ACL configuration, including VACL-related
configuration.
Displays information about VACLs that are applied to a VLAN.
Displays information about VLAN access maps.
Purpose
Displays VACL configuration. If the VLAN access-map includes the
statistics command, then the show vlan access-list command output
includes the number of packets that have matched each rule.
Clears statistics for all VACLs or for a specific VACL.
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
Displaying and Clearing VACL Statistics
93