show access-list usage acl-rule port

show access-list usage acl-rule port port

Description

Displays the number of ACL rules consumed by the ACLs on a particular port or on the slices that support a particular port.

Syntax Description

port Specifies to display the usage on this port.

Default

N/A.

Usage Guidelines

Use this command to display the rules used per slice, and also display the rule usage of the specified port.

The slice support for the BlackDiamond X8 series switches, BlackDiamond 8000 series modules, E4G-200 and E4G-400 switches, and Summit family switches that use this mechanism is as follows:
  • BlackDiamond 8800 eā€‘series modules—Each group of 24 ports has 8 slices with each slice having enough memory for 128 ingress rules and actions.

  • Summit X460 series switches and E4G-200 and E4G-400 switches—
    • Each group of 24 ports has 4 slices with each slice having enough memory for 128 egress rules.

    • Each group of 24 ports has 16 slices with each slice having enough memory for 256 ingress rules.

  • Summit X480 series switches—
    • Each group of 48 ports has 4 slices with each slice having enough memory for 256 egress rules.

    • Each group of 48 ports has 16 internal slices with each slice having enough memory for 512 ingress rules plus the external slice.

  • Summit X670 switches and BlackDiamond X8 series switches—
    • Each group of 48 ports has 4 slices with each slice having enough memory for 256 egress rules.

    • Each group of 48 ports has 10 slices; the first 4 (0-3) slices hold 128 ingress rules each, and the last 6 (4-9) slices hold 256 ingress rules each, which adds up to 2048 ingress rules.

  • BlackDiamond 8000 c- and xl-series modules—
    • 10G1Xc—

      • Its single port has 4 slices with each slice having enough memory for 128 egress rules.

      • Its single port has 16 slices with each slice having enough memory for 256 ingress rules.

    • G8Xc—

      • Its 8 ports have 4 slices with each slice having enough memory for 128 egress rules.

      • Its 8 ports have 16 slices with each slice having enough memory for 256 ingress rules.

    • 10G4Xc/10G8Xc—

      • Each group of 2 ports has 4 slices with each slice having enough memory for 128 egress rules.

      • Each group of 2 ports has 16 slices with each slice having enough memory for 256 ingress rules.

    • 10G24X-c—

      • Each group of 12 ports has 4 slices with each slice having enough memory for 128 egress rules.

      • Each group of 12 ports has 12 slices with each of the first 8 slices having enough memory for 128 ingress rules and each of the last 4 slices having enough memory for 256 ingress rules, which adds up to 2048 ingress rules.

    • G96T-c—

      • Each group of 48 ports has 4 slices with each slice having enough memory for 256 egress rules.

      • Each group of 48 ports has 16 slices with each slice having enough memory for 512 ingress rules.

    • G48Tc/G48Xc/G24Xc—

      • Each group of 24 ports has 4 slices with each slice having enough memory for 128 egress rules.

      • Each group of 24 ports has 16 slices with each slice having enough memory for 256 ingress rules.

    • G48X-xl/G48T-xl—

      • Its 48 ports have 4 slices with each slice having enough memory for 256 egress rules.

      • Its 48 ports have 16 slices with each slice having enough memory for 512 ingress rules.

    • 10G8X-xl—

      • Each group of 4 ports has 4 slices with each slice having enough memory for 256 egress rules.

      • Each group of 4 ports has 16 slices with each slice having enough memory for 512 ingress rules.

    • 40G6X-xm—

      • Each group of 24 ports has 4 slices with each slice having enough memory for 256 egress rules.

      • Each group of 24 ports has 10 slices with each slice having enough memory for 256 ingress rules.

      Note

      Note

      Egress ACLs are supported on BlackDiamond X8 series switches, BlackDiamond 8000 c- xl-, and xm-series modules, E4G-200 and E4G-400 switches, and Summit X460, X480, X670, and X770 series switches only.

Example

The following example displays the ACL rule usage on port 5:

Switch.3 # show access-list usage acl-rule port 5
Ports 1-12, 25-36
Total Rules:     Used: 34  Available: 990
In ExtremeXOS 15.5.1 and onwards, unless there is at least 1 rule in a given slice, the slice is not allocated. Since the slice is not yet allocated, a physical slice is not assigned to a virtual slice. So in this previous example, "used" displays what is used in that particular slice, and "available" shows the remaining rules in that particular used slice.

The following example displays the ACL ingress and egress rule usage on port 5:1:

Switch.4 # show access-list usage acl-rule port 5:1
Ports 5:1-5:48
Total Ingress/Egress Rules:
Used: 11  Available: 8181
Used: 1  Available: 1023

History

This command was first available in ExtremeXOS 11.4.

This command was modified to support BlackDiamond 8000 e-series modules in ExtremeXOS 11.5.

Platform Availability

This command is available only on BlackDiamond X8 series switches, BlackDiamond 8000 series modules, E4G-200 and E4G-400 switches, and Summit family switches, whether or not included in a SummitStack.