4000 Router Series ACL and QoS Command Reference

# Display application details of all IPv4 ACLs (including IPv4 basic, IPv4 advanced, Ethernet frame

header, and user-defined ACLs) for incoming packet filtering on Ethernet 1/1.

<Sysname> display packet-filter verbose interface ethernet 1/1 inbound

Interface: Ethernet1/1

In-bound policy:

ACL 2001,

rule 0 permit

rule 5 permit source 1.1.1.1 0 (Failed)

rule 10 permit vpn-instance test (Failed)

ACL 2002 (Failed),

Default action: Deny

Table 5 Command output

Field Descri

tion

Interface Interface to which the ACL applies.

VLAN VLAN to which the ACL applies.

Global

ACL application details for packet filtering on all physical

interfaces.

In-bound policy ACL used for filtering incoming traffic.

Out-bound policy ACL used for filtering outgoing traffic.

ACL 2001 IPv4 basic ACL 2001 has been successfully applied.

ACL 2002 (Failed) The device has failed to apply IPv4 basic ACL 2002.

rule 5 permit source 1.1.1.1 0 (Failed) The device has failed to apply rule 5.

Default action

Default action for packet filtering:

• Deny—The default action deny has been successfully

applied for packet filtering.

• Deny (Failed)—The device has failed to apply the default

action deny for packet filtering. The action permit still

functions.

• Permit—The default action permit has been successfully

applied for packet filtering.

packet-filter

Use packet-filter to apply an ACL to an interface to filter packets.

Use undo packet-filter to remove an ACL application from an interface.

Syntax

packet-filter [ ipv6 ] { acl-number | name acl-name } { inbound | outbound }

undo packet-filter [ ipv6 ] { acl-number | name acl-name } { inbound | outbound }

Default

An interface does not filter packets.