Acl Restrictions; Troubleshooting Acls; Displaying Acl Policies On The Vem - Cisco Nexus 1000V Troubleshooting Manual

ACL Restrictions

S e n d d o c u m e n t c o m m e n t s t o n e x u s 1 k - d o c f e e d b a c k @ c i s c o . c o m .
ACL Restrictions
The following restrictions apply to ACLs:
•
•
•
•
•
•
•
•

Troubleshooting ACLs

The commands listed in this section can be used on the VSM to see the policies that are configured and
applied on the interfaces.
Use the following command to display configured ACLs:
•
Use following commands on the VSM to see run-time information of the ACLMGR and ACLCOMP
during configuration errors, and to collect ACLMGR process run-time information configuration errors:
•
•
•
•
•
•
Use the following commands to collect ACLCOMP process run-time information configuration errors:
•
•
•
•

Displaying ACL Policies on the VEM

The commands listed in this section can be used to display configured ACL policies on the VEM.
Use the following command to list the ACLs installed on that server
~ # module vem 3 execute vemcmd show acl
Acl-id Ref-cnt
Cisco Nexus 1000V Troubleshooting Guide, Release 4.2(1)SV2(2.1)
15-2
You cannot apply more than one IP ACL and one MAC ACL in each direction on an interface.
A MAC ACL applies only to Layer 2 packets.
VLAN ACLs are not supported.
IP fragments are not supported n ACL rules.
Non initial fragments are not subject to ACL lookup.
The established option to specify TCP flags is not supported.
You cannot have two not-equal-to (neq) operators in the same rule.
ACL is not supported in port channels.
show access-list summary
show system internal aclmgr event-history errors
show system internal aclmgr event-history msgs
show system internal aclmgr ppf
show system internal aclmgr mem-stats (to debug memory usage and leaks)
show system internal aclmgr status
show system internal aclmgr dictionary
show system internal aclcomp event-history errors
show system internal aclcomp event-history msgs
show system internal aclcomp pdl detailed
show system internal aclcomp mem-stats (to debug memory usage and leaks)
Type Numrules
1 1 IPv4 1
Stats
disabled
Chapter 15 ACLs
OL-28795-01