View ACE Statistics

View ACE statistics to ensure that the filter operates correctly.

Note

Note

The ACL statistics do not support security action on some hardware platforms.

Procedure

  1. Enter Privileged EXEC mode:

    enable

  2. View ACE statistics for a specific ACL, ACE, or ACE type:

    show filter acl statistics <acl-id> <ace-id> [qos] [security]

  3. View all ACE statistics:

    show filter acl statistics all

  4. View default ACE statistics:

    show filter acl statistics default [<acl-id>]

  5. View global statistics for ACEs:

    show filter acl statistics global [<acl-id>]

  6. View filter policer statistics for ACL and ACE:

    show filter acl statistics <acl-id> <ace-id> policer

Example

View ACE statistics:

Note

Note

Based on your hardware platform, the output can display all the ACL packets or segregate them as QoS and security ACL packets. 

Switch:1>enable
Switch:1#show filter acl statistics all

=========================================================================================
                          Acl Global Statistics Table
=========================================================================================
Acl Id  Acl Name    Acl Type  Acl Sec    Acl Sec    Acl QOS    Acl QOS   Acl      Acl
                              Packets    Bytes      Packets    Bytes     Packets  Bytes
-----------------------------------------------------------------------------------------
1       ACL-1       inVlan    0          0          0          0         0        0
2       ACL-2       inVlan    0          0          0          0         0        0

Displayed 2 of 2 entries
=========================================================================================
                          Acl Default Statistics Table
=========================================================================================
Acl Id  Acl Name    Acl Type  Acl Sec    Acl Sec    Acl QOS    Acl QOS   Acl      Acl
                              Packets    Bytes      Packets    Bytes     Packets  Bytes
-----------------------------------------------------------------------------------------  

1       ACL-1       inVlan    0          0          0          0         0        0
2       ACL-2       inVlan    0          0          0          0         0        0

Displayed 2 of 2 entries

Switch:1#show filter acl statistics default

=========================================================================================
                          Acl Default Statistics Table
=========================================================================================
Acl Id  Acl Name    Acl Type  Acl Sec    Acl Sec    Acl QOS    Acl QOS   Acl      Acl
                              Packets    Bytes      Packets    Bytes     Packets  Bytes
----------------------------------------------------------------------------------------- 
1       ACL-1       inVlan    0          0          0          0         0        0
2       ACL-2       inVlan    0          0          0          0         0        0

Displayed 2 of 2 entries
Switch:1#show filter acl statistics global 2

=========================================================================================
                          Acl Global Statistics Table
=========================================================================================
Acl Id  Acl Name    Acl Type  Acl Sec    Acl Sec    Acl QOS    Acl QOS   Acl      Acl
                              Packets    Bytes      Packets    Bytes     Packets  Bytes
-----------------------------------------------------------------------------------------
2       ACL-2       inVlan    0          0          0          0         0        0

Displayed 1 of 1 entries

View filter acl ace policer statistics on VSP 7400 Series, 5420 Series, and 5520 Series:

Note

Note

IPv4 policer statistics for red, yellow, and green packets are available on VSP 7400 Series, 5420 Series, and 5520 Series. Statistics display as numbers, which represent the hit number of packets and bytes.

Switch:1#show filter acl statistics 3 3 policer
=========================================================================================================
                             Acl Ace Policer Table
=========================================================================================================
Acl Id  Ace Id  Packets    Bytes      Green      Green      Yellow     Yellow     Red        Red
                                      Packets    Bytes      Packets    Bytes      Packets    Bytes
---------------------------------------------------------------------------------------------------------
3       3    29964026      106591916  142584     14254      142574     277225     28869904   10275810600

View filter acl ace policer statistics on VSP 4900 Series.

Note

Note

Only IPv4 policer statistics for red packets are available on VSP 4900 Series. Yellow and green packet counters are not supported on VSP 4900 Series. Statistics display as numbers, which represent the hit number of packets and bytes.

Switch:1(config)#show filter acl statistics 3 3 policer
============================================================================================================
                              Acl Ace Policer Table
============================================================================================================
Acl Id   Ace Id   Packets        Bytes     Green    Green    Yellow     Yellow    Red       Red
                                                             Packets    Bytes     Packets   Bytes    
------------------------------------------------------------------------------------------------------------
3         3        29964026    106591916   N/A       N/A     N/A        N/A       28869904  10275810600
Note

Note

The show filter acl statistics <acl-id> <ace-id> policer command displays statistics according to the configuration on the switch.

View filter acl ace statistics with no policer configured.

Switch:1(config)#show filter acl statistics 3 3 
============================================================================================================
                              Acl Ace Policer Table
============================================================================================================
Acl Id   Ace Id   Packets     Bytes        Green      Green    Yellow     Yellow    Red       Red
                                           Packets    Bytes    Packets    Bytes     Packets   Bytes
------------------------------------------------------------------------------------------------------------
10         1001      0            0           N/A        N/A      N/A        N/A        N/A       N/A

Displayed 1 of 1 entries

View filter acl ace statistics with filter ACE enabled and policer configured, but the filter is not hit or there is no traffic running.

Switch:1(config)#show filter acl statistics 10 1011 
============================================================================================================
                              Acl Ace Policer Table
============================================================================================================
Acl Id   Ace Id   Packets     Bytes        Green      Green    Yellow     Yellow    Red       Red
                                           Packets    Bytes    Packets    Bytes     Packets   Bytes
------------------------------------------------------------------------------------------------------------
3         3       0            0           0          0         0          0        0          0

Displayed 1 of 1 entries

View filter acl ace statistics with filter ACE not enabled and policer not configured

Switch:1(config)#show filter acl statistics 
============================================================================================================
                              Acl Ace Policer Table
============================================================================================================
Acl Id   Ace Id   Packets     Bytes        Green      Green    Yellow     Yellow    Red       Red
                                           Packets    Bytes    Packets    Bytes     Packets   Bytes
------------------------------------------------------------------------------------------------------------


Displayed 1 of 1 entries

Variable Definitions

Use the data in the following table to use the show filter acl statistics command.

Variable

Value

<acl-id>

Specifies the ACL ID. Use the CLI Help to see the available range for the switch.

<ace-id>

Specifies the ACE ID. Different hardware platforms support different ACE ID ranges. Use the CLI Help to see the available range for the switch.
policer
Note:

Exception: only supported on VSP 4900 Series, VSP 7400 Series, 5520 Series, and 5420 Series.

Specifies the policer parameter for the command.
9037147-00 Rev AB