Table of Contents
Advertisement
WX1200# display security acl info all
ACL information for all
set security acl ip acl-999 (hits #2 0)
----------------------------------------------------
1. deny IP source IP 192.168.0.1 0.0.0.0 destination IP any
2. permit IP source IP 192.168.0.2 0.0.0.0 destination IP any enable-hits
set security acl ip acl-2 (hits #1 0)
----------------------------------------------------
1. permit L4 Protocol 115 source IP 192.168.1.11 0.0.0.0 destination IP
192.168.1.15 0.0.0.0 precedence 0 tos 0 enable-hits
WX1200# display security acl info acl-2
ACL information for acl-2
set security acl ip acl-2 (hits #1 0)
----------------------------------------------------
1. permit L4 Protocol 115 source IP 192.168.1.11 0.0.0.0 destination IP
192.168.1.15 0.0.0.0 precedence 0 tos 0 enable-hits
Viewing Security ACL Details
You can display the contents of one or all security ACLs that are
committed. To display the contents of all committed security ACLs, type
the following command:
You can also view a specific security ACL. For example, to view acl-2, type
the following command:
Displaying Security ACL Hits
Once you map an ACL, you can view the number of packets it has
filtered, if you included the keyword hits. (For information on setting hits,
see "Setting a Source IP ACL" on page 233.) Type the following
command:
WX1200# display security acl hits
ACL hit-counters
Index Counter
----- -------------------- --------
1
2
5
To sample the number of hits the security ACLs generate, you must
specify the number of seconds between samples. For example, to sample
the hits generated every 180 seconds, type the following commands:
WX1200# hit-sample-rate 180
WX1200# display security acl hits
Creating and Committing a Security ACL
ACL-name
0 acl-2
0 acl-999
916 acl-123
241
Advertisement
Table of Contents
