Verifying Turbo Acls; Applying Time Ranges To Access Lists - Cisco MWR 1941-DC - 1941 Mobile Wireless Router Software Configuration Manual

Chapter 6 Configuring the MWR 1941-DC in a Cell Site DCN

Verifying Turbo ACLs

Use the show access-list compiled EXEC command to verify that the Turbo ACL feature has been
successfully configured on your router. This command also displays the memory overhead of the Turbo
ACL tables for each access list. The command output contains the following states:
•
•
•
•
•
The following is sample output from the show access-lists compiled EXEC command:
Router# show access-lists compiled
Compiled ACL statistics:
12 ACLs loaded, 12 compiled tables
ACL
1
2
3
4
5
9
20
21
101
102
120
199
First level lookup tables:
Block
0
1
2
3
4
5
6
7

Applying Time Ranges to Access Lists

You can implement access lists based on the time of day and week using the time-range global
configuration command. To do so, first define the name and times of the day and week of the time range,
then reference the time range by name in an access list to apply restrictions to the access list.
Currently, IP and Internetwork Packet Exchange (IPX) named or numbered extended access lists are the
only functions that can use time ranges. The time range allows the network administrator to define when
the permit or deny statements in the access list are in effect. Prior to this feature, access list statements
were always in effect once they were applied. The time-range keyword is referenced in the named and
numbered extended access list task tables in the
Numbers" section on page 6-46
OL-11503-01
Operational—The access list has been compiled by Turbo ACL, and matching to this access list is
performed through the Turbo ACL tables at high speed.
Unsuitable—The access list is not suitable for compiling, perhaps because it has time-range enabled
entries, evaluate references, or dynamic entries.
Deleted—No entries are in this access list.
Building—The access list is being compiled. Depending on the size and complexity of the list, and
the load on the router, the building process may take a few seconds.
Out of memory—An access list cannot be compiled because the router has exhausted its memory.
State Tables
Operational
Operational
Operational
Operational
Operational
Operational
Operational
Operational
Operational
Operational
Operational
Operational
Use
TOS/Protocol
IP Source (MS)
IP Source (LS)
IP Dest (MS)
IP Dest (LS)
TCP/UDP Src Port
TCP/UDP Dest Port
TCP Flags/Fragment
Cisco MWR 1941-DC Mobile Wireless Edge Router Software Configuration Guide
Entries Config Fragment
1 2 1
1 3 2
1 4 3
1 3 2
1 5 4
1 3 2
1 9 8
1 5 4
1 15 9
1 13 6
1 2 1
1 4 3
Rows Columns Memory used
6/16 12/16
10/16 12/16
27/32 12/16
3/16 12/16
9/16 12/16
1/16 12/16
3/16 12/16
3/16 12/16
"Creating Standard and Extended Access Lists Using
and "Creating Standard and Extended Access Lists Using Names"
Filtering IP Packets Using Access Lists
Redundant Memory
0 0
0 0
0 0
0 0
0 0
0 0
0 0
0 0
7 2
6 0
0 0
0 0
66048
66048
132096
66048
66048
66048
66048
66048
1Kb
1Kb
1Kb
1Kb
1Kb
1Kb
1Kb
1Kb
1Kb
1Kb
1Kb
1Kb
6-57