Displaying And Debugging Acl Configurations - 3Com 8807 Configuration Manual

176 C 21: ACL C
HAPTER
Displaying and
Debugging ACL
Configurations
ONFIGURATION
Table 154 Activate ACL
Operation
Deactivate IP group ACL
Activate IP group ACL and link group
ACL at same time
Deactivate IP group ACL and link group
ACL at same time
Activate link group ACL
Deactivate link group ACL
For service processor cards, perform the following configurations in VLAN view.
Table 155 Activate ACL
Operation
Activate ip group ACL
Deactivate ip group ACL
system-index index here is the system index for an ACL rule. When delivering a
rule, the system assigns a globally unique index to it, for convenience of later
retrieval. You can also assign a system index for it when delivering an ACL rule
with this command, but the index value may change while the system is running.
You are not recommended to assign a system index if not urgently necessary.
After these configurations are completed, you can use the display command in
any view to view ACL running to check configuration result. You can clear ACL
statistics using the display command in user view.
Table 156 Display and debug ACL configurations
Operation
Display the configuration and status of the
current time range
Display ACL configuration
Display the total number of ACL rules applied
on the specified card
Display ACL application information
Display the configuration information of the
flow template
Command
undo packet-filter inbound ip-group { acl-number
| acl-name } [ rule rule ]
packet-filter inbound ip-group { acl-number |
acl-name } { rule rule link-group { acl-number |
acl-name } [ rule rule [ system-index index ] ] |
link-group { acl-number | acl-name } rule rule }
undo packet-filter inbound ip-group { acl-number
| acl-name } { rule rule link-group { acl-number |
acl-name } [ rule rule ] | link-group { acl-number |
acl-name } rule rule }
packet-filter inbound link-group { acl-number |
acl-name } [ rule rule [ system-index index ] ]
undo packet-filter inbound link-group {
acl-number | acl-name } [ rule rule ]
Command
packet-filter inbound ip-group {
acl-number | acl-name } [ rule rule] [
system-index index] slot slotid
undo packet-filter inbound ip-group {
acl-number | acl-name } [ rule rule ] slot slotid
Command
display time-range { all | name }
display acl config { all | acl-number |
acl-name }
display acl remaining entry slot slotid
display acl running-packet-filter { all |
interface interface-type interface-number |
vlan vlan-id }
display flow-template [ default | interface
interface-type interface-number | slot slotid |
user-defined ]