ACL probe commands -- display system internal acl

Use display system internal acl to display ACL configuration and match statistics.

Syntax

Centralized devices:

display system internal acl [ ipv6 | mac | user-defined ] { acl-number | name acl-name }

Distributed devices in standalone mode:Centralized IRF devices:

display system internal acl [ ipv6 | mac | user-defined ] { acl-number | name acl-name } slot slot-number cpu cpu-number

Distributed devices in IRF mode:

display system internal acl [ ipv6 | mac | user-defined ] { acl-number | name acl-name } chassis chassis-number slot slot-number cpu cpu-number

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv6: Specifies the IPv6 ACL type.

mac: Specifies the Layer 2 ACL type.

user-defined: Specifies the user-defined ACL type. To specify the IPv4 ACL type, do not specify the ipv6, mac, or user-defined keyword.

acl-number: Specifies an ACL by its number. The following are available value ranges:

· 2000 to 2999 for basic ACLs.

· 3000 to 3999 for advanced ACLs.

· 4000 to 4999 for Layer 2 ACLs.

· 5000 to 5999 for user-defined ACLs.

name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to 63 characters.

slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.