This command displays summary information of all the IPv6 Access lists. Use the access list name to display detailed information of a specific IPv6 ACL (Access Control List).
This command displays information about the attributes icmp-type, icmp-code, fragments, routing, tcp flags, and source and destination L4 port ranges. It displays committed rate, committed burst size, and ACL rule hit count of packets matching the configured ACL rule within an ACL. This counter value rolls-over on reaching the maximum value. There is a dedicated counter for each ACL rule. ACL counters do not interact with PBR counters.
For ACL with multiple rules, once a match occurs at any one specific rule, counters associated with this rule only get incremented (for example, consider an ACL with three rules, after matching rule two, counters for rule three would not be incremented).
For ACL counters, If an ACL rule is configured without RATE-LIMIT, the counter value is a count of the forwarded/discarded packets. (For example: for a burst of 100 packets, the Counter value is 100).
If an ACL rule is configured with RATE LIMIT, the counter value is that of the MATCHED packet count. If the sent traffic rate exceeds the configured limit, the counters still display matched packet count (despite getting dropped beyond the configured limit since match criteria is met) that equals the sent rate. For example, if the rate limit is set to 10 kbps and ‘matching‘ traffic is sent at 100 kbps, counters would reflect 100 kbps value. If the sent traffic rate is less than the configured limit, the counters display only the matched packet count. Either way, only the matched packet count is reflected in the counters, irrespective of whether they get dropped or forwarded. ACL counters do not interact with diffserv policies.
| Format | show ipv6 access-lists [name] |
| Mode | Privileged EXEC |
Note
Only the access list fields that you configure are displayed. Thus, the command output varies based on the match criteria configured within the rules of an ACL.| Rule Number | The ordered rule number identifier defined within the IPv6 ACL. |
| Action | The action associated with each rule. The possible values are Permit or Deny. |
| Match All | Whether this access list applies to every packet. Possible values are True or False. |
| Protocol | The protocol to filter for this rule. |
| Committed Rate | The committed rate defined by the rate-limit attribute. |
| Committed Burst Size | The committed burst size defined by the rate-limit attribute. |
| Source IP Address | The source IP address for this rule. |
| Source L4 Port Keyword | The source port for this rule. |
| Destination IP Address | The destination IP address for this rule. |
| Destination L4 Port Keyword | The destination port for this rule. |
| IP DSCP | The value specified for IP DSCP. |
| Flow Label | The value specified for IPv6 Flow Label. |
| Log | Displays when you enable logging for the rule. |
| Assign Queue | The queue identifier to which packets matching this rule are assigned. |
| Mirror Interface | The unit/slot/port to which packets matching this rule are copied. |
| Redirect Interface | The unit/slot/port to which packets matching this rule are forwarded. |
| Time Range Name | Displays the name of the time-range if the IPv6 ACL rule has referenced a time range. |
| Rule Status | Status (Active/Inactive) of the IPv6 ACL rule. |
| ACL Hit Count | The ACL rule hit count of packets matching the configured ACL rule within an ACL. |
The following example shows CLI display output for the command.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB(Extreme 220) (Routing) #show ipv6 access-lists ip61
ACL Name: ip61
Outbound Interface(s): control-plane
Rule Number: 1
Action......................................... permit
Match Every.................................... FALSE
Protocol....................................... 17(udp)
Committed Rate................................. 32
Committed Burst Size........................... 16
ACL hit count ..................................0