Specifications

Creating and Committing a Security ACL
RoamAbout Mobility System Software Configuration Guide 15-11
Viewing Security ACL Details
YoucandisplaythecontentsofoneorallsecurityACLsthatarecommitted.
Examples
TodisplaythecontentsofallcommittedsecurityACLs,typethefollowingcommand:
RBT-8100# show security acl info
ACL information for all
set security acl ip acl-999 (hits #2 0)
----------------------------------------------------
1. deny IP source IP 192.168.0.1 0.0.0.0 destination IP any
2. permit IP source IP 192.168.0.2 0.0.0.0 destination IP any enable-hits
set security acl ip acl-2 (hits #1 0)
----------------------------------------------------
1. permit L4 Protocol 115 source IP 192.168.1.11 0.0.0.0 destination IP
192.168.1.15 0.0.0.0 precedence 0 tos 0 enable-hits
YoucanalsoviewaspecificsecurityACL.Forexample,toviewacl‐2,typethefollowing
command:
RBT-8100# show security acl info acl-2
ACL information for acl-2
set security acl ip acl-2 (hits #1 0)
----------------------------------------------------
1. permit L4 Protocol 115 source IP 192.168.1.11 0.0.0.0 destination IP
192.168.1.15 0.0.0.0 precedence 0 tos 0 enable-hits
Displaying Security ACL Hits
OnceyoumapanACL,youcanviewthenumberofpacketsithasfiltered,ifyouincludedthe
keywordhits.(Forinformationonsettinghits,see“SettingaSourceIPACL”onpage 15‐4.)
Examples
Typethefollowingcommand:
RBT-8100# show security acl hits
ACL hit-counters
Index Counter ACL-name
----- -------------------- --------
1 0 acl-2
2 0 acl-999
5 916 acl-123
TosamplethenumberofhitsthesecurityACLsgenerate,youmustspecifythenumberofseconds
betweensamples.Forexample,tosamplethehitsgeneratedevery180 seconds,typethefollowing
commands:
RBT-8100# hit-sample-rate 180
RBT-8100# show security acl hits
ACL hit-counters
Index Counter ACL-name
----- -------------------- --------
1 31986 acl-red
2 0 acl-green