Displays the number of ACL (Access Control List) slices and rules consumed by the ACLs on the slices that support a particular port.
port | Specifies to display the usage for the slices that support this port. |
N/A.
Use this command to display how many slices and how many rules per each slice are currently consumed by the ACLs on the slices that support a particular port. This command also displays which ports share the same slices as the specified port.
Beginning with ExtremeXOS 12.5, you can reserve or allocate a slice for a specific feature such that rules for the feature does not share a slice with other components. A text string has been added at the end of the output for each slice that indicates which feature, if any, is reserving the slice. See the example below.
In ExtremeXOS 15.5.1 and onwards, unless there is at least one rule in a given slice, the slice is not allocated. Since the slice is not yet allocated, a physical slice is not assigned to a virtual slice. So "used" displays what is used in that particular slice, and "available" shows the remaining rules in that particular used slice.
user/other—The slice is used by user ACLs and/or other switch features.
Reserved for: feature name—the slice is reserved for the named feature, for instance VLAN (Virtual LAN) statistics. Rules for this feature may not share a slice with other features or user ACLs.
system—The slice contains only rules used for certain specific switch features. User ACLs may not share a slice with a system slice.
The following example displays the ACL slice usage on port 1 or an ExtremeSwitching X870 series switch:
# show access-list usage acl-slice port 1 Ports 1-93, 95, 97, 101, 105, 109, 113, 117, 121, 125 Stage: INGRESS Pipe 0 Group 3 Priority 31 Rules: Used: 10 Available 1014 system Double Reserved=FALSE Reservations: type num mode Stage: INGRESS Pipe 1 Group 6 Priority 31 Rules: Used: 0 Available 2048 user/other IntraSliceDouble Reserved=FALSE Group 7 Priority 30 Rules: Used: 1 Available 2047 user/other IntraSliceDouble Reserved=FALSE Group 4 Priority 29 Rules: Used: 1 Available 2047 user/other IntraSliceDouble Reserved=FALSE Group 5 Priority 28 Rules: Used: 10 Available 758 system Double Reserved=FALSE Reservations: type num mode Stage: INGRESS Pipe 2 Group 1 Priority 31 Rules: Used: 10 Available 1014 system Double Reserved=FALSE Reservations: type num mode Stage: INGRESS Pipe 3 Group 2 Priority 31 Rules: Used: 10 Available 1014 system Double Reserved=FALSE Reservations: type num mode Stage: EGRESS Slices: Used: 0 Available: 4 Virtual Slice * (physical slice 0) Rules: Used: 0 Available: 256 Virtual Slice * (physical slice 1) Rules: Used: 0 Available: 256 Virtual Slice * (physical slice 2) Rules: Used: 0 Available: 256 Virtual Slice * (physical slice 3) Rules: Used: 0 Available: 256 Stage: LOOKUP Slices: Used: 0 Available: 4 Virtual Slice * (physical slice 0) Rules: Used: 0 Available: 256 Virtual Slice * (physical slice 1) Rules: Used: 0 Available: 256 Virtual Slice * (physical slice 2) Rules: Used: 0 Available: 256 Virtual Slice * (physical slice 3) Rules: Used: 0 Available: 256 Stage: EXTERNAL Virtual Slice : (*) Physical slice not allocated to any virtual slice.
This command was first available in ExtremeXOS 11.5.
This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X590, X620, X690, X870 series switches.