4000 Router Series ACL and QoS Command Reference

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number.

inbound: Specifies the inbound direction.

outbound: Specifies the outbound direction.

acl-number: Specifies the number of an ACL:

• 2000 to 2999 for IPv4 basic ACLs if the ipv6 keyword is not specified and for IPv6 basic ACLs if

the ipv6 keyword is specified.

• 3000 to 3999 for IPv4 advanced ACLs s if the ipv6 keyword is not specified and for IPv6 advanced

ACLs if the ipv6 keyword is specified.

• 4000 to 4999 for Ethernet frame header ACLs. This entry is not displayed if the ipv6 keyword is

specified.

• 5000 to 5999 for user-defined ACLs. This entry is not displayed if the ipv6 keyword is specified.

name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to

63 characters. It must start with an English letter. For a basic ACL or advanced ACL, if you do not specify

the ipv6 keyword, this option specifies the name of an IPv4 basic ACL or advanced ACL. If you specify

the ipv6 keyword, this option specifies the name of an IPv6 basic ACL or advanced ACL.

slot slot-number: Specifies a card by its slot number. If no slot is specified, the command displays ACL

application details on the main board for packet filtering. (MSR4000.)

Usage guidelines

When none of acl-number and name acl-name is specified, this command displays application details of

all ACLs for packet filtering.

• If the ipv6 keyword is not specified, all ACLs refer to all IPv4 basic, IPv4 advanced, Ethernet frame

header, and user-defined ACLs.

• If the ipv6 keyword is specified, all ACLs refer to all IPv6 basic and IPv6 advanced ACLs.

Examples

# Display application details of all IPv4 ACLs (including IPv4 basic, IPv4 advanced, Ethernet frame

header, and user-defined ACLs) for incoming packet filtering in VLAN 2.

<Sysname> display packet-filter verbose vlan 2 inbound

VLAN: 2

In-bound policy:

ACL 2001

rule 0 permit

rule 5 permit source 1.1.1.1 0 (Failed)

rule 10 permit vpn-instance test (Failed)

ACL 2002 (Failed)