D-Link DWS-1008 Cli Reference Manual page 283

DWS-1008 CLI Reference Guide
show security acl dscp
Displays a table that maps Differentiated Services Code Point (DSCP) values to their equivalent
combinations of IP precedence values and IP ToS values.
Use the table to look up the values to use with the precedence and tos options in an ACE
when you want the ACE to match on their equivalent DSCP value.
Syntax: show security acl dscp
Defaults: None
Access: Enabled
Usage: The IP precedence and ToS fields use 7 bits, while the DSCP field uses only 6
bits. Following the DSCP field is a 2-bit ECN field that can be set by other devices
based on network congestion. If you are filtering based on DSCP value, you need
two ACEs to ensure that the ACL matches regardless of the value of the seventh
bit. Use the first ACE to match on the precedence and ToS values corresponding
to the DSCP value. Use the second ACE to match on the same precedence value
but on the ToS value plus 1.
Examples: The following command displays the table:
DWS-1008# show security acl dscp
DSCP
dec hex
-----------------------------------------------------------------------------------------
0 0x00
1 0x01
2 0x02
...
63 0x3f
show security acl hits
Displays the number of packets filtered by security ACLs ("hits") on the switch. Each time a
packet is filtered by a security ACL, the hit counter increments.
Syntax: show security acl hits
Defaults: None
D-Link Systems, Inc.
TOS precedence
dec hex dec
0 0x00 0
4 0x04 0
8 0x08 0
252 0xfc 7
Security ACL Commands
tos
hex
0
2
4
14
282