R3303-HP HSR6800 Routers ACL and QoS Command Reference

Parameters

acl-number: Specifies an IPv4 ACL by its number:

• 2000 to 2999 for IPv4 basic ACLs

• 3000 to 3999 for IPv4 advanced ACLs

• 4000 to 4999 for Ethernet frame header ACLs

all: Displays information for all IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs.

name acl-name: Specifies an ACL by its name. The acl-name argument takes a case-insensitive string of

1 to 63 characters. It must start with an English letter.

slot slot-number: Displays the match statistics for ACLs on a card. The slot-number argument specifies a

card by its slot number. If no slot is provided, the command displays the ACL configuration on the device.

(In standalone mode.)

chassis chassis-number slot slot-number: Displays the match statistics for ACLs on a card on a specified

IRF member. The chassis-number argument specifies the ID of an IRF member. The slot-number argument

specifies a card by its slot number. If this option is not specified, the command displays the ACL

configurations on all IRF members. (In IRF mode.)

|: Filters command output by specifying a regular expression. For more information about regular

expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Usage guidelines

This command displays ACL rules in config or depth-first order, whichever is configured.

Examples

# Display configuration and match statistics for all IPv4 basic, IPv4 advanced, and Ethernet frame

header ACLs.

<Sysname> display acl all

Basic ACL 2000, named flow, 3 rules,

This is an IPv4 basic ACL.

ACL's step is 5

rule 0 permit

rule 5 permit source 1.1.1.1 0 (2 times matched)

rule 10 permit vpn-instance mk

Basic ACL 2001, named -none-, 3 rules, match-order is auto,

ACL's step is 5

rule 10 permit vpn-instance rd

rule 10 comment This rule is used in VPN rd.

rule 5 permit source 2.2.2.2 0

rule 0 permit