Use the following show commands to display the configuration, binding status and statistics pertaining to overlay access list.
-
From the privileged EXEC mode, use the
show access-list overlay transit
command to display which overlay access list is bound with overlay transit.
device# show access-list overlay transit tr_name
Overlay Transit Global Binding
Inbound access-list is abc_ext (From User)
Outbound access-list is not set
-
Use the
show access-list overlay type vxlan
command to display status of individual filters and binding information of the overlay access list.
device# show access-list overlay type vxlan acl-name abc_ext
Number of Rules: 4
seq 1000 permit dst-vtep-ip-host 200.1.1.1 src-vtep-ip-host 150.1.1.1 vni 1 vni-mask 0 redirect Ethernet 2/65 sflow count 44024774(pkts)/52829728800(bytes)
seq 1010 permit dst-vtep-ip-host 200.1.1.2 src-vtep-ip-host 150.1.1.2 vni 2 vni-mask 0 redirect Ethernet 2/19 sflow count 44024773(pkts)/52829727600(bytes)
seq 1020 permit dst-vtep-ip-host 200.1.1.3 src-vtep-ip-host 150.1.1.3 vni 3 vni-mask 0 redirect Ethernet 2/43 sflow count 0(pkts)/0(bytes)
seq 1030 permit dst-vtep-ip-host 200.1.1.4 src-vtep-ip-host 150.1.1.4 vni 4 vni-mask 0 redirect Ethernet 2/67 sflow count 0(pkts)/0(bytes)
Transit : transit_name
-
Use the
show statistics access-listcoverlay type vxlan
command to display statistics for specific an overlay access list.
device# show statistics access-list overlay type vxlan abc_ext
Number of Rules: 2
seq 1000 permit dst-vtep-ip-host 200.1.1.1 src-vtep-ip-host 150.1.1.1 vni 1 vni-mask 0 redirect Ethernet 2/65 sflow count 0(pkts)/0(bytes)
seq 1010 permit dst-vtep-ip-host 200.1.1.2 src-vtep-ip-host 150.1.1.2 vni 2 vni-mask 0 redirect Ethernet 2/19 sflow count 44024773(pkts)/52829727600(bytes)
-
Use the
show running-config overlay access-list type vxlan
command to display the overlay access list configuration.
device# show running-config overlay access-list type vxlan
overlay access-list type vxlan extended abc_ext
seq 12 permit dst-vtep-ip-host 12.12.1.1 src-vtep-ip-host 33.4.5.6 vni-any count sflow native tag none dst-ip-any src-ip-any dst-port-any src-port-any
seq 123 permit dst-vtep-ip-any src-vtep-ip-any vni-any count!
