H3C S6812 Series Command Reference Manual page 1522

Field
This is an IPv4 basic ACL.
ACL's step is 5
rule 5 permit source 1.1.1.1 0
rule 5 comment This rule is
used on
Ten-GigabitEthernet1/0/1.
display packet-filter
Use display packet-filter to display ACL application information for packet filtering.
Syntax
display packet-filter { interface [ interface-type interface-number ] [ inbound | outbound ] |
interface vlan-interface vlan-interface-number [ inbound | outbound ] [ slot slot-number ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface [ interface-type interface-number ]: Specifies an interface by its type and number. VLAN
interfaces are not supported. If you do not specify an interface, this command displays ACL
application information for packet filtering on all interfaces except VLAN interfaces.
interface vlan-interface vlan-interface-number: Specifies a VLAN interface by its number.
inbound: Specifies the inbound direction.
outbound: Specifies the outbound direction.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member
device, this command displays ACL application information for packet filtering for the master device.
Usage guidelines
If neither the inbound keyword nor the outbound keyword is specified, this command displays ACL
application information for packet filtering in both directions.
Examples
# Display ACL application information for inbound packet filtering on interface Ten-GigabitEthernet
1/0/1.
<Sysname> display packet-filter interface ten-gigabitethernet 1/0/1 inbound
Interface: Ten-GigabitEthernet1/0/1
Inbound policy:
IPv4 ACL 2001
IPv6 ACL 2002 (Failed)
MAC ACL 4003, Hardware-count (Failed)
IPv4 ACL 2004, Hardware-count (Failed)
Description
order. This field is not displayed when the match order is config.
Description of the ACL.
The rule numbering step is 5.
Content of rule 5. The rule permits packets sourced from the IP address
1.1.1.1.
Comment of rule 5.
7