R3166-R3206-HP High-End Firewalls Access Control Command Reference-6PW101

5
View
Any view
Default level
1: Monitor level
Parameters
acl-number: Specifies an IPv4 ACL by its number:
• 2000 to 2999 for basic ACLs
• 3000 to 3999 for advanced ACLs
• 4000 to 4999 for Ethernet frame header ACLs
all: Displays information for all IPv4 ACLs.
name acl-name: Specifies an IPv4 ACL by its name. The acl-name argument takes a case insensitive
string of 1 to 32 characters. It must start with an English letter.
Description
Use the display acl command to display configuration and match statistics for the specified or all IPv4
ACLs.
This command displays ACL rules in config or depth-first order, whichever is configured.
Examples
# Display the configuration and match statistics for all IPv4 ACLs.
<Sysname> display acl all
Basic ACL 2000, named flow, 3 rules,
Statistics is enabled
ACL's step is 5
rule 0 permit
rule 5 permit source 1.1.1.1 0 (2 times matched)
Basic ACL 2001, named -none-, 3 rules, match-order is auto,
ACL's step is 5
rule 10 permit vpn-instance rd
rule 10 comment This rule is used in VPN rd.
rule 5 permit source 2.2.2.2 0
rule 0 permit
Table 1 Output description
Field
Descri
p
tion
Basic ACL 2000
Category and number of the ACL. The following field
information is about IPv4 basic ACL 2000.
named flow
The name of the ACL is flow. "-none-" means the ACL is not
named.
3 rules The ACL contains three rules.
match-order is auto
The match order for the ACL is auto, which sorts ACL rules in
depth-first order. This field is not present when the match order
is config.
ACL's step is 5 The rule numbering step is 5.