show access-list usage acl-slice port

show access-list usage acl-slice port port

Description

Displays the number of ACL (Access Control List) slices and rules consumed by the ACLs on the slices that support a particular port.

Syntax Description

port Specifies to display the usage for the slices that support this port.

Default

N/A.

Usage Guidelines

Use this command to display how many slices and how many rules per each slice are currently consumed by the ACLs on the slices that support a particular port. This command also displays which ports share the same slices as the specified port.

Beginning with ExtremeXOS 12.5, you can reserve or allocate a slice for a specific feature such that rules for the feature does not share a slice with other components. A text string has been added at the end of the output for each slice that indicates which feature, if any, is reserving the slice. See the example below.

In ExtremeXOS 15.5.1 and onwards, unless there is at least one rule in a given slice, the slice is not allocated. Since the slice is not yet allocated, a physical slice is not assigned to a virtual slice. So "used" displays what is used in that particular slice, and "available" shows the remaining rules in that particular used slice.

Slices are allocated or reserved as follows:
  • user/other—The slice is used by user ACLs and/or other switch features.

  • Reserved for: feature name—the slice is reserved for the named feature, for instance VLAN (Virtual LAN) statistics. Rules for this feature may not share a slice with other features or user ACLs.

  • system—The slice contains only rules used for certain specific switch features. User ACLs may not share a slice with a system slice.

Example

The following example displays the ACL slice usage on port 1 or an ExtremeSwitching X870 series switch:

# show access-list usage acl-slice port 1
Ports 1-93, 95, 97, 101, 105, 109, 113, 117, 121, 125
Stage: INGRESS Pipe 0
Group 3 Priority 31 Rules:   Used:     10 Available   1014 system Double Reserved=FALSE
Reservations:
type                num       mode
Stage: INGRESS Pipe 1
Group 6 Priority 31 Rules:   Used:      0 Available   2048 user/other IntraSliceDouble Reserved=FALSE
Group 7 Priority 30 Rules:   Used:      1 Available   2047 user/other IntraSliceDouble Reserved=FALSE
Group 4 Priority 29 Rules:   Used:      1 Available   2047 user/other IntraSliceDouble Reserved=FALSE
Group 5 Priority 28 Rules:   Used:     10 Available    758 system Double Reserved=FALSE
Reservations:
type                num       mode
Stage: INGRESS Pipe 2
Group 1 Priority 31 Rules:   Used:     10 Available   1014 system Double Reserved=FALSE
Reservations:
type                num       mode
Stage: INGRESS Pipe 3
Group 2 Priority 31 Rules:   Used:     10 Available   1014 system Double Reserved=FALSE
Reservations:
type                num       mode
Stage: EGRESS
Slices:          Used: 0  Available: 4
Virtual Slice  * (physical slice  0) Rules:   Used:      0  Available:    256
Virtual Slice  * (physical slice  1) Rules:   Used:      0  Available:    256
Virtual Slice  * (physical slice  2) Rules:   Used:      0  Available:    256
Virtual Slice  * (physical slice  3) Rules:   Used:      0  Available:    256
Stage: LOOKUP
Slices:          Used: 0  Available: 4
Virtual Slice  * (physical slice  0) Rules:   Used:      0  Available:    256
Virtual Slice  * (physical slice  1) Rules:   Used:      0  Available:    256
Virtual Slice  * (physical slice  2) Rules:   Used:      0  Available:    256
Virtual Slice  * (physical slice  3) Rules:   Used:      0  Available:    256
Stage: EXTERNAL

Virtual Slice :  (*) Physical slice not allocated to any virtual slice.

History

This command was first available in ExtremeXOS 11.5.

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X620, X690, X870 series switches.