ADTRAN AOS Version R10.1.0 Command Reference Manual page 549

Command Reference Guide
Release A4.01
Release A5.01
Functional Notes
The show ip ffe command can be further filtered by adding any combination of the following parameters:
destination <ip address>
destination-port <port>
details
egress <interface>
egress ipsec <rapidroute interface ID>
icmp-type <type>
ingress <interface>
ingress ipsec <rapidroute interface ID>
protocol <protocol>
source <ip address>
source-port <port>
type <type>
For example, the destination <ip address> and source <ip address> parameters can be used in
conjunction with one another. In this case, the command would look like this:
#show ip ffe destination 10.10.10.3 source 10.10.10.1
These parameters can be combined in any order, and as many times as is necessary to get the desired
output.
The detail keyword must be the last keyword in the command. For example, show ip ffe
destination <ip address> egress <interface> source-port <port> details is acceptable,
but show ip ffe destination <ip address> details egress <interface> is not.
Usage Examples
The following is sample output from the show ip ffe command:
>enable
#show ip ffe
Timeout TCP UDP
Age: 30m0s 30m0s
Inactive: 15s 15s
Type: * valid, ! ineligible, - rejected
Flags: F firewall, N NAT, T altered ToS, D don't fragment, I IPsec
--------------------------------
Ingress: eth 0/1
149 hits, 62553 misses, 0 drops
T Proto Source
! udp 10.200.2.7
60000CRG0-35E
Command was expanded to include the Metro Ethernet Forum (MEF)
Ethernet interface.
Command was expanded to include the Gigabit Ethernet interface.
ICMP AH
30m0s 30m0s
15s 15s
Destination Specific
10.200.205.255 3959
Copyright © 2012 ADTRAN, Inc.
ESP GRE Other
30m0s 30m0s 30m0s
15s 15s 15s
Age Used Drops
137 17s
Enable Mode Command Set
Flags
10 0
549