Specifications
14-16 Security ACL Commands
set security acl hit-sample-rate
Specifiesthetimeinterval,inseconds,atwhichthepacketcounterforeachsecurityACLis
sampledfordisplay.ThecountercountsthenumberofpacketsfilteredbythesecurityACL—or
“hits.”
Syntax
set security acl hit-sample-rate seconds
Parameters
Defaults
Bydefault,thehitsarenotsampled.
Mode
Enabled.
Usage
ToviewcounterresultsforaparticularACL,usetheshowsecurityaclinfoacl‐namecommand.To
viewthehitsforallsecurityACLs,usetheshowsecurityaclhitscommand.
Example
ThefirstcommandsetsMSStosampleACLhitsevery15 seconds.Thesecondandthird
commandsdisplaytheresults.Theresultsshowthat916packetsmatchingsecurityacl_153were
sentsincetheACLwasmapped.
RBT-8100# set security acl hit-sample-rate 15
RBT-8100# show security acl info acl_153
ACL information for acl_153
set security acl ip acl_153 (hits #3 916)
---------------------------------------------------------
1. permit IP source IP 20.1.1.1 0.0.0.0 destination IP any enable-hits
RBT-8100# show security acl hits
ACL hit counters
Index Counter ACL-name
----- -------------------- -----------
1 0 acl_2
2 0 acl_175
3 916 acl_153
Related Commands
• showsecurityaclhitsonpage 14‐19
• showsecurityaclinfoonpage 14‐20
seconds Numberofsecondsbetweensa mples.Asamplerateof0(zero)disablesthe
sampleprocess.