H3C S6812 Series Command Reference Manual page 1528

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member
device, this command displays ACL application details for packet filtering for the master device.
Usage guidelines
If acl-number, name acl-name, ipv6, or mac is not specified, this command displays application
details of all ACLs for packet filtering.
To specify the IPv4 ACL type, do not specify the ipv6 or mac keyword.
Examples
# Display application details of all ACLs for inbound packet filtering on Ten-GigabitEthernet 1/0/1.
<Sysname> display packet-filter verbose interface ten-gigabitethernet 1/0/1 inbound
Interface: Ten-GigabitEthernet1/0/1
Inbound policy:
IPv4 ACL 2001
rule 0 permit
rule 5 permit source 1.1.1.1 0 (Failed)
IPv4 ACL 2002 (Failed)
IPv6 ACL 2000
rule 0 permit
MAC ACL 4000
IPv4 default action: Deny
IPv6 default action: Deny
MAC default action: Deny
Table 5 Command output
Field
Interface
Inbound policy
Outbound policy
IPv4 ACL 2001
IPv4 ACL 2002 (Failed)
Hardware-count
Hardware-count (Failed)
rule 5 permit source 1.1.1.1 0 (Failed)
IPv4 default action
Description
Interface to which the ACL applies.
ACL used for filtering incoming traffic.
ACL used for filtering outgoing traffic.
IPv4 basic ACL 2001 has been successfully applied.
The device has failed to apply IPv4 basic ACL 2002.
ACL rule match counting has been successfully enabled.
The device has failed to enable counting ACL rule matches.
The device has failed to apply rule 5.
Packet filter default action for packets that do not match any
IPv4 ACLs:
•
Deny—The default action deny has been successfully
applied for packet filtering.
•
Deny (Failed)—The device has failed to apply the default
action deny for packet filtering. The action permit still
functions.
•
Permit—The default action permit has been successfully
13