Specifications

IP Switching Commands
show pxf cpu access-lists
ISW-266
Cisco IOS IP Switching Command Reference
May 2008
Table 45, Part 1, describes the significant fields shown in the display.
The following sample output describes the information displayed in the next section of the command
output from the show pxf cpu access-lists security command:
First level lookup tables:
Block Use Rows Columns Memory used
0 TOS/Protocol 1/128 1/32 16384
1 IP Source (MS) 1/128 1/32 16384
2 IP Source (LS) 1/128 1/32 16384
3 IP Dest (MS) 2/128 1/32 16384
4 IP Dest (LS) 12/128 1/32 16384
5 TCP/UDP Src Port 1/128 1/32 16384
6 TCP/UDP Dest Port 1/128 1/32 16384
7 TCP Flags/Fragment 1/128 1/32 16384
Table 45, Part 2, describes the significant fields shown in the display.
Ta b l e 45, Part 1 show pxf cpu access-lists security Field Descriptions
Field Description
ACL Identifies the ACL by name or number.
State Displays the current state of the ACL:
• Copying—ACL is in the process of being created or
compiled.
• Operational—ACL is active and filtering packets.
• Out of acl private mem—ACL has run out of the private
memory that was allocated exclusively to it.
• Out of shared mem—ACL has run out of the memory that
it shares with other ACLs.
• Unknown Failure—ACL has failed because of an
uncategorized reason.
• Unneeded—ACL was allocated but is not currently in
use.
Tables An indicator of whether the ACL has been split into more
than one PXF pass. The first three ACLs in the output are
MiniACLs, and have the ACL_index duplicated in the Tables
column.
Entries The count of ACL rules as seen by the Turbo compiler. This
is the sum of the Config, Fragment, and Redundant columns
plus 1.
Config The count of rules for this ACL.
Fragment The count of extra rules added to handle fragment handling,
where Layer 4 information is needed but not available in a
packet fragment.
Redundant The count of rules that are not needed because they are
covered by earlier rules.
Memory The amount of PXF XCM in use for the ACL.
ACL_index The index of the ACL in XCM.