The acl-mask keyword is not relevant for the a-series or e-series models.
If you enter this command and specify an a-series or e-series port, the following error message appears:
This command is not applicable to the specified port.Use the acl-rule keyword to display the total number of ACL rules that are available and consumed for the specified port.
If this keyword is specified on an a-series or e-series port, the first part of the command output details the port list using this resource because the ACL hardware rules are shared by all ports on a given ASIC (24x1G ports). If you enter the same command and specify any of the listed ports, the command output is identical.
*switch# show access-list usage acl-rule port 4:1 Ports 4:1-4:12, 4:25-4:36 Total Rules: Used: 46 Available: 2002
The acl-slice keyword is used to display ACL resource consumption for each of the independent TCAMs, or slices, that make up the hardware ACLs.
Each slice is a 128-entry TCAM. The command output displays the number of consumed and available TCAM rules for each slice as follows.
*switch# show access-list usage acl-slice port 4:1 Ports 4:1-4:12, 4:25-4:36 Slices: Used: 8 Available: 8 Slice 0 Rules: Used: 1 Available: 127 Slice 1 Rules: Used: 1 Available: 127 Slice 2 Rules: Used: 1 Available: 127 Slice 3 Rules: Used: 8 Available: 120 Slice 4 Rules: Used: 8 Available: 120 Slice 5 Rules: Used: 2 Available: 126 Slice 6 Rules: Used: 1 Available: 127 Slice 7 Rules: Used: 24 Available: 104
Use the acl-range keyword to view the Layer-4 port range hardware resource on an a-series or e-series model switch.
Each a-series and e-series ASIC has 16 Layer-4 port range checkers that are shared among the 24 1G ports. The first part of the command output lists the ports that utilizes this resource. The second part of the command output lists the number of range checkers that are consumed and the number available for use.
switch # show access-list usage acl-range port 4:1 Ports 4:1-4:12, 4:25-4:36 L4 Port Ranges: Used: 0 Available: 16
If the acl-slice or acl-range keyword is specified with an e-series port, the following error message will appear:
This command is not applicable to the specified port.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB