HP A8800 Series Installation manual

HP A8800 Routers
A
CL and QoS
Command Reference
Part number: 5998-1761
Software version: A8800-CMW520-R3627
Document version: 6W102-20130906

Legal and notice information
© Copyright 2011-2013 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.

i
Contents
ACL configuration commands ····································································································································· 1
acl ··············································································································································································1
acl copy·····································································································································································2
acl ipv6······································································································································································3
acl ipv6 copy····························································································································································4
acl ipv6 logging frequence ·····································································································································5
acl ipv6 name···························································································································································6
acl logging frequence··············································································································································6
acl mode····································································································································································7
acl name····································································································································································7
description·································································································································································8
display acl·································································································································································9
display acl ipv6 ····················································································································································· 10
display acl mode ··················································································································································· 11
display acl resource ·············································································································································· 12
display flow-template interface ···························································································································· 13
display flow-template user-defined ······················································································································ 14
display time-range················································································································································· 15
flow-template·························································································································································· 16
flow-template basic················································································································································ 17
hardware-count enable········································································································································· 18
reset acl counter ···················································································································································· 19
reset acl ipv6 counter············································································································································ 19
rule (Ethernet frame header ACL view) ··············································································································· 20
rule (IPv4 advanced ACL view)···························································································································· 21
rule (IPv4 basic ACL view)···································································································································· 26
rule (IPv6 advanced ACL view)···························································································································· 28
rule (IPv6 basic ACL view)···································································································································· 32
rule (user-defined ACL view) ································································································································ 34
rule comment·························································································································································· 35
rule remark····························································································································································· 36
step·········································································································································································· 38
time-range ······························································································································································ 38
QoS policy configuration commands·······················································································································41
Class configuration commands····································································································································· 41
display traffic classifier ········································································································································· 41
if-match ··································································································································································· 42
traffic classifier······················································································································································· 46
Traffic behavior configuration commands··················································································································· 47
accounting······························································································································································ 47
car··········································································································································································· 48
display traffic behavior········································································································································· 49
filter ········································································································································································· 50
primap color-map-dp············································································································································· 51
primap pre-defined················································································································································ 51
primap pre-defined color······································································································································ 52
redirect ··································································································································································· 53
redirect-default ······················································································································································· 54

ii
remark dot1p ························································································································································· 54
remark drop-precedence ······································································································································ 55
remark dscp ··························································································································································· 56
remark ip-precedence ··········································································································································· 57
remark local-precedence ······································································································································ 57
remark mpls-exp ···················································································································································· 58
traffic behavior ······················································································································································ 59
QoS policy configuration and application commands······························································································ 59
classifier behavior ················································································································································· 59
display qos policy ················································································································································· 60
display qos policy global ····································································································································· 61
display qos policy interface ································································································································· 63
display qos vlan-policy ········································································································································· 65
qos apply policy···················································································································································· 67
qos apply policy global········································································································································ 68
qos policy······························································································································································· 68
qos vlan-policy······················································································································································· 69
reset qos policy global·········································································································································· 70
reset qos vlan-policy·············································································································································· 70
Priority mapping configuration commands ··············································································································72
Priority mapping table configuration commands········································································································ 72
display qos map-table··········································································································································· 72
display qos map-table color································································································································· 73
import······································································································································································ 74
qos map-table ························································································································································ 75
qos map-table color ·············································································································································· 76
Port priority configuration commands·························································································································· 77
qos priority····························································································································································· 77
Priority trust mode configuration commands ··············································································································· 77
display qos trust interface····································································································································· 77
qos trust ·································································································································································· 78
GTS and rate limit configuration commands ···········································································································80
GTS configuration commands ······································································································································ 80
display qos gts interface······································································································································· 80
qos gts any····························································································································································· 81
qos gts queue························································································································································· 82
Rate limit configuration commands ······························································································································ 83
display qos lr interface ········································································································································· 83
qos lr······································································································································································· 84
Hardware congestion management configuration commands···············································································86
Queue scheduling profile configuration commands··································································································· 86
display qos qmprofile configuration···················································································································· 86
display qos qmprofile interface ··························································································································· 87
qos apply qmprofile·············································································································································· 88
qos qmprofile························································································································································· 88
queue······································································································································································ 89
WFQ queuing configuration commands ····················································································································· 90
display qos wfq interface ····································································································································· 90
qos bandwidth queue ··········································································································································· 91
qos wfq weight ······················································································································································ 92
CBQ configuration commands ····································································································································· 93
queue af ································································································································································· 93
queue ef·································································································································································· 94

iii
queue wfq ······························································································································································ 94
wred········································································································································································ 95
Congestion avoidance configuration commands ····································································································96
WRED configuration commands ·································································································································· 96
display qos wred interface··································································································································· 96
WRED table configuration commands························································································································· 97
display qos wred table ········································································································································· 97
qos wred table······················································································································································· 98
queue······································································································································································ 99
queue weighting-constant···································································································································100
qos wred apply ···················································································································································100
Aggregate CAR configuration commands ············································································································ 102
car name ······························································································································································102
display qos car name ·········································································································································102
qos car aggregative············································································································································103
reset qos car name··············································································································································105
QoS traffic accounting configuration commands ································································································· 106
display qos traffic-counter···································································································································106
qos traffic-counter ················································································································································108
reset qos traffic-counter·······································································································································109
Per-port queue-based traffic statistics displaying commands ··············································································· 110
display qos queue-statistics interface ················································································································110
QoS pipe mode configuration commands············································································································ 113
qos pipe-mode ·····················································································································································113
FR QoS configuration commands ·························································································································· 114
cir allow································································································································································114
display fr class-map·············································································································································115
fr class···································································································································································115
fr-class···································································································································································116
fr traffic-shaping···················································································································································117
HQoS configuration commands····························································································································· 118
Forwarding class configuration commands···············································································································118
display qos forwarding-class······························································································································118
remark forwarding-class ·····································································································································119
Forwarding group configuration commands·············································································································119
display qos forwarding-group····························································································································119
forwarding-class profile ······································································································································120
forwarding-group profile (forwarding-group view)··························································································121
qos copy forwarding-group································································································································121
qos forwarding-group ·········································································································································122
Drop profile configuration commands ·······················································································································123
display qos drop-profile······································································································································123
green·····································································································································································124
qos drop-profile ···················································································································································124
red·········································································································································································125
weighting-constant···············································································································································126
yellow ···································································································································································126
Forwarding profile configuration commands············································································································127
bandwidth ····························································································································································127
display qos forwarding-profile···························································································································128

iv
drop-profile···························································································································································128
gts cir ····································································································································································129
qos forwarding-profile ········································································································································130
wfq ········································································································································································130
Scheduler policy configuration commands ···············································································································131
display qos scheduler-policy diagnosis interface·····························································································131
display qos scheduler-policy interface ··············································································································133
display qos scheduler-policy name····················································································································135
forwarding-group group ·····································································································································137
forwarding-group match ·····································································································································137
forwarding-group profile (scheduler-policy view) ····························································································138
layer······································································································································································139
qos apply scheduler-policy·································································································································139
qos copy scheduler-policy ··································································································································140
qos scheduler-policy············································································································································141
remark qos-local-id ··············································································································································141
Support and other resources ·································································································································· 143
Contacting HP ······························································································································································143
Subscription service ············································································································································143
Related information······················································································································································143
Documents····························································································································································143
Websites·······························································································································································143
Conventions ··································································································································································144
Index ········································································································································································ 146

1
ACL configuration commands
In this chapter, SPC cards refer to the cards prefixed with SPC, for example, SPC-GT48L. SPE cards refer
to the cards prefixed with SPE, for example, SPE-1020-E-II.
acl
Syntax
acl number acl-number [ name acl-name ] [ match-order { auto | config } ]
undo acl { all | name acl-name | number acl-number }
View
System view
Default level
2: System level
Parameters
number acl-number: Specifies the number of an access control list (ACL):
•2000 to 2999 for IPv4 basic ACLs
•3000 to 3999 for IPv4 advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
•5000 to 5999 for user-defined ACLs
name acl-name: Assigns a name to the ACL for easy identification. The acl-name argument takes a
case-insensitive string of 1 to 63 characters. It must start with an English letter, and to avoid confusion,
cannot be all.
match-order: Sets the order in which ACL rules are compared against packets:
•auto—Compares ACL rules in depth-first order. The depth-first order differs with ACL categories. For
more information, see ACL and QoS Configuration Guide.
•config—Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has higher
priority. If no match order is specified, the config order applies by default.
all: Deletes all IPv4 basic, IPv4 advanced, Ethernet frame header, and user-defined ACLs.
Description
Use acl to create an IPv4 basic, IPv4 advanced, Ethernet frame header, or user-defined ACL and enter its
view. If the ACL has been created, you enter its view directly.
Use undo acl to delete the specified ACLs.
By default, no ACL exists.
You can assign a name to an ACL only when you create it. After an ACL is created with a name, you
cannot rename it or remove its name.
You can change match order only for ACLs that do not contain any rules.
The match-order keyword is not available for user-defined ACLs. They always use the config order.

2
To display any ACLs you have created, use the display acl command.
Examples
# Create ACL 2000, and enter its view.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000]
# Create ACL 2002 with the name flow, and enter its view.
<Sysname> system-view
[Sysname] acl number 2002 name flow
[Sysname-acl-basic-2002-flow]
# Enter the view of an ACL by specifying its number.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000]
# Enter the view of an ACL by specifying its number.
<Sysname> system-view
[Sysname] acl number 2002
[Sysname-acl-basic-2002-flow]
# Delete the ACL numbered 2000.
<Sysname> system-view
[Sysname] undo acl number 2000
# Delete the ACL named flow.
<Sysname> system-view
[Sysname] undo acl name flow
acl copy
Syntax
acl copy { source-acl-number | name source-acl-name } to { dest-acl-number | name dest-acl-name }
View
System view
Default level
2: System level
Parameters
source-acl-number: Specifies an existing source ACL by its number:
•2000 to 2999 for IPv4 basic ACLs
•3000 to 3999 for IPv4 advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
•5000 to 5999 for user-defined ACLs
name source-acl-name: Specifies an existing source ACL by its name. The source-acl-name argument
takes a case-insensitive string of 1 to 63 characters.

3
dest-acl-number: Assigns a unique number to the ACL you are creating. This number must be from the
same ACL category as the source ACL. Available value ranges include:
•2000 to 2999 for IPv4 basic ACLs
•3000 to 3999 for IPv4 advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
•5000 to 5999 for user-defined ACLs
name dest-acl-name: Assigns a unique name to the ACL you are creating. The dest-acl-name takes a
case-insensitive string of 1 to 63 characters. It must start with an English letter and to avoid confusion,
cannot be all. For this ACL, the system automatically picks the smallest number from all available
numbers in the same ACL category as the source ACL.
Description
Use acl copy to create an ACL by copying an ACL that already exists. Except for the number and name
(if any), the new ACL has the same configuration as the source ACL.
You can assign a name to an ACL only when you create it. After an ACL is created with a name, you
cannot rename it or remove its name.
Examples
# Create IPv4 basic ACL 2002 by copying IPv4 basic ACL 2001.
<Sysname> system-view
[Sysname] acl copy 2001 to 2002
acl ipv6
Syntax
acl ipv6 number acl6-number [ name acl6-name ] [ match-order { auto | config } ]
undo acl ipv6 { all | name acl6-name | number acl6-number }
View
System view
Default level
2: System level
Parameters
number acl6-number: Specifies the number of an ACL:
•2000 to 2999 for IPv6 basic ACLs
•3000 to 3999 for IPv6 advanced ACLs
name acl6-name: Assigns a name to the ACL for easy identification. The acl6-name argument takes a
case-insensitive string of 1 to 63 characters. It must start with an English letter, and to avoid confusion,
cannot be all.
match-order: Sets the order in which ACL rules are compared against packets:
•auto—Compares ACL rules in depth-first order. The depth-first order differs with ACL categories. For
more information, see ACL and QoS Configuration Guide.
•config—Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has higher
priority. If no match order is specified, the config order applies by default.

4
all: Delete all IPv6 basic and IPv6 advanced ACLs.
Description
Use acl ipv6 to create an IPv6 basic or advanced ACL and enter its ACL view. If the ACL has been created,
you enter its view directly.
Use undo acl ipv6 to delete the specified IPv6 ACL or all IPv6 basic and IPv6 advanced ACLs.
By default, no ACL exists.
You can assign a name to an ACL only when you create it. After an ACL is created, you cannot rename
it or remove its name.
You can change match order only for ACLs that do not contain any rules.
To display any ACLs you have created, use the display acl ipv6 command.
Examples
# Create IPv6 ACL 2000 and enter its view.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000]
# Create IPv6 basic ACL 2001 with the name flow, and enter its view.
<Sysname> system-view
[Sysname] acl ipv6 number 2001 name flow
[Sysname-acl6-basic-2001-flow]
acl ipv6 copy
Syntax
acl ipv6 copy { source-acl6-number | name source-acl6-name } to { dest-acl6-number | name
dest-acl6-name }
View
System view
Default level
2: System level
Parameters
source-acl6-number: Specifies an existing source ACL by its number:
•2000 to 2999 for IPv6 basic ACLs
•3000 to 3999 for IPv6 advanced ACLs
name source-acl6-name: Specifies an existing source ACL by its name. The source-acl6-name argument
takes a case-insensitive string of 1 to 63 characters.
dest-acl6-number: Assigns a unique number to the ACL you are creating. This number must be from the
same ACL category as the source ACL. Available value ranges include:
•2000 to 2999 for IPv6 basic ACLs
•3000 to 3999 for IPv6 advanced ACLs
name dest-acl6-name: Assigns a unique name to the ACL you are creating. The dest-acl6-name takes a
case-insensitive string of 1 to 63 characters. It must start with an English letter and to avoid confusion,

5
cannot be all. For this ACL, the system automatically picks the smallest number from all available
numbers in the same ACL category as the source ACL.
Description
Use acl ipv6 copy to create an IPv6 basic or IPv6 advanced ACL by copying an IPv6 basic or IPv6
advanced ACL that already exists. Except for the number and name (if any), the new ACL has the same
configuration as the source ACL.
You can assign a name to an ACL only when you create it. After an ACL is created with a name, you
cannot rename it or remove its name.
Examples
# Create IPv6 basic ACL 2002 by copying IPv6 basic ACL 2001.
<Sysname> system-view
[Sysname] acl ipv6 copy 2001 to 2002
acl ipv6 logging frequence
Syntax
acl ipv6 logging frequence frequence
undo acl ipv6 logging frequence
View
System view
Default level
2: System level
Parameters
frequence: Specifies the interval in minutes at which IPv6 packet filtering logs are generated and output.
It must be a multiple of 5, in the range of 0 to 1440. To disable generating IPv6 logs, assign 0 to the
argument.
Description
Use acl ipv6 logging frequence to set the interval for generating and outputting IPv6 packet filtering logs.
The log information includes the number of matching IPv6 packets and the matching ACL rules. This
command logs only for IPv6 basic ACL rules and IPv6 advanced ACL rules that have the logging
keyword.
Use undo acl ipv6 logging frequence to restore the default.
By default, the interval is 0. No IPv6 packet filtering logs are generated.
Related commands: rule (IPv6 advanced ACL view) and rule (IPv6 basic ACL view).
Examples
# Enable the device to generate and output IPv6 packet filtering logs at 10-minute intervals.
<Sysname> system-view
[Sysname] acl ipv6 logging frequence 10

6
acl ipv6 name
Syntax
acl ipv6 name acl6-name
View
System view
Default level
2: System level
Parameters
acl6-name: Specifies the name of an existing IPv6 basic ACL or IPv6 advanced ACL, a case-insensitive
string of 1 to 63 characters. It must start with an English letter.
Description
Use acl ipv6 name to enter the view of an IPv6 basic ACL or IPv6 advanced ACL that has a name.
Related commands: acl ipv6.
Examples
# Enter the view of IPv6 basic ACL flow.
<Sysname> system-view
[Sysname] acl ipv6 name flow
[Sysname-acl6-basic-2001-flow]
acl logging frequence
Syntax
acl logging frequence frequence
undo acl logging frequence
View
System view
Default level
2: System level
Parameters
frequence: Specifies the interval in minutes at which IPv4 packet filtering logs are generated and output.
It must be a multiple of 5, in the range of 0 to 1440. To disable generating IPv4 logs, assign 0 to the
argument.
Description
Use acl logging frequence to set the interval for generating and outputting IPv4 packet filtering logs. The
log information includes the number of matching IPv4 packets and the matching ACL rules. This
command logs only for IPv4 basic ACL rules and IPv4 advanced ACL rules that have the logging
keyword.
Use undo acl logging frequence to restore the default.
By default, the interval is 0. No IPv4 packet filtering logs are generated.

7
Related commands: rule (IPv4 advanced ACL view) and rule (IPv4 basic ACL view).
Examples
# Enable the device to generate and output IPv4 packet filtering logs at 10-minute intervals.
<Sysname> system-view
[Sysname] acl logging frequence 10
acl mode
Syntax
acl mode {1 |2 |3 |4 }
View
System view
Default Level
2: System level
Parameters
1: 18 bytes for an SPE card and 40 bytes for an SPC card.
2: 36 bytes for an SPE card and 40 bytes for an SPC card.
3: 18 bytes for an SPE card and 80 bytes for an SPC card.
4: 36 bytes for an SPE card and 80 bytes for an SPC card.
Description
Use acl mode to set the ACL rule length limit mode. The length limit mode takes effect after you restart the
router.
By default, the ACL rule length limit mode is 2.
Examples
# Set the ACL rule length limit mode to 1 so that the length limit for an SPE card is set to 18 bytes and that
for an SPC card is set to 40 bytes.
<Sysname> system-view
[Sysname] acl mode 1
ACL has been set to mode 1, and will take effect after the next system reboot.
acl name
Syntax
acl name acl-name
View
System view
Default level
2: System level

8
Parameters
acl-name: Specifies the name of an existing IPv4 basic, IPv4 advanced, Ethernet frame header, or
user-defined ACL, which is a case-insensitive string of 1 to 63 characters. It must start with an English
letter.
Description
Use acl name to enter the view of an IPv4 basic, IPv4 advanced, Ethernet frame header, or user-defined
ACL that has a name.
Related commands: acl.
Examples
# Enter the view of IPv4 basic ACL flow.
<Sysname> system-view
[Sysname] acl name flow
[Sysname-acl-basic-2001-flow]
description
Syntax
description text
undo description
View
IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view,
user-defined ACL view
Default level
2: System level
Parameters
text: ACL description, a case-sensitive string of 1 to 127 characters.
Description
Use description to configure a description for an ACL.
Use undo description to remove the ACL description.
By default, an ACL has no ACL description.
Related commands: display acl and display acl ipv6.
Examples
# Configure a description for IPv4 basic ACL 2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] description This is an IPv4 basic ACL.
# Configure a description for IPv6 basic ACL 2000.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] description This is an IPv6 basic ACL.

9
display acl
Syntax
display acl { acl-number | all | name acl-name } [ slot slot-number ] [ |{ begin | exclude | include }
regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
acl-number: Specifies an ACL by its number:
•2000 to 2999 for basic ACLs
•3000 to 3999 for advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
•5000 to 5999 for user-defined ACLs
all: Displays information for all IPv4 basic, IPv4 advanced, Ethernet frame header, and user-defined
ACLs.
name acl-name: Specifies an ACL by its name. The acl-name argument takes a case-insensitive string of
1 to 63 characters. It must start with an English letter.
slot slot-number: Displays the match statistics for ACLs on a card. The slot-number argument specifies a
card by its slot number. If no slot is provided, the command displays the configurations of ACLs on the
device.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display acl to display configuration and match statistics for the specified ACL or all IPv4 basic, IPv4
advanced, Ethernet frame header, and user-defined ACLs.
This command displays ACL rules in config or depth-first order, whichever is configured.
Examples
# Display the configuration and match statistics for ACL 2001.
<Sysname> display acl 2001
Basic ACL 2001, named flow, 1 rule,
ACL's step is 5
rule 5 permit source 1.1.1.1 0 (5 times matched)
rule 5 comment This rule is used in GE3/1/1
Basic ACL 2002, named -none-, 1 rule,

10
ACL's step is 5
rule 0 permit source 10.110.0.0 0.0.0.255
Table 1 Command output
Field Descri
p
tion
Basic ACL 2001 Category and number of the ACL. The following field information is
about ACL 2001.
named flow The name of the ACL is flow. "-none-" means the ACL is not named.
1 rule The ACL contains one rule.
ACL's step is 5 The rule numbering step is 5.
5 times matched
There have been five matches for the rule. The statistic counts only ACL
matches performed by software.
This field is not displayed when no packets have matched the rule.
Uncompleted
Applying the rule to hardware failed because no sufficient resources
were available or the hardware does not support the rule. This event
might occur when you modify a rule in an ACL that has been applied.
rule 5 comment This rule is used in
GE3/1/1. The description of ACL rule 10 is "This rule is used in GE3/1/1."
display acl ipv6
Syntax
display acl ipv6 { acl6-number | all | name acl6-name } [ slot slot-number ] [ |{ begin | exclude |
include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
acl6-number: Specifies an ACL by its number:
•2000 to 2999 for IPv6 basic ACLs
•3000 to 3999 for IPv6 advanced ACLs
all: Displays information for all IPv6 basic and IPv6 advanced ACLs.
name acl6-name: Specifies an ACL by its name. The acl6-name argument takes a case-insensitive string
of 1 to 63 characters. It must start with an English letter.
slot slot-number: Displays the match statistics for ACLs on a card. The slot-number argument represents
the slot number of the card. If no slot number is provided, the command displays configuration
information about all ACLs on the device.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.

11
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display acl ipv6 to display the configuration and match statistics for the specified IPv6 ACL or all IPv6
basic and IPv6 advanced ACLs.
This command displays ACL rules in config or depth-first order, whichever is configured.
Examples
# Display the configuration and match statistics for ACL 2001.
<Sysname> display acl ipv6 2001
Basic IPv6 ACL 2001, named flow, 1 rule,
ACL's step is 5
rule 0 permit source 1::2/128 (5 times matched)
rule 0 comment This rule is used in GE3/1/1
Basic IPv6 ACL 2002, named -none-, 1 rule,
ACL's step is 5
rule 0 permit source FF1E::101:101/128
Table 2 Command output
Field Descri
p
tion
Basic IPv6 ACL 2001 Category and number of the ACL. The following field information is
about this IPv6 basic ACL 2001.
named flow The name of the ACL is flow. "-none-" means the ACL is not named.
1 rule The ACL contains one rule.
ACL's step is 5 The rule numbering step is 5.
5 times matched
There have been five matches for the rule. The statistic counts only IPv6
ACL matches performed by software.
This field is not displayed when no packets have matched the rule.
Uncompleted
Applying the rule to hardware failed because no sufficient resources
were available or the hardware does not support the rule. This event
might occur when you modify a rule in an ACL that has been applied.
rule 0 comment This rule is used in
GE3/1/1. The description of ACL rule 10 is "This rule is used in GE3/1/1."
display acl mode
Syntax
display acl mode [ |{ begin | exclude | include } regular-expression ]
View
Any view
Default Level
1: Monitor level

12
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display acl mode to display the ACL rule length limit mode.
Examples
# Display the ACL rule length limit mode.
<Sysname> display acl mode
Current ACL mode : mode 3 (SPE ACL key short, SPC ACL key long)
Acl mode after system restart : mode 3 (SPE ACL key short, SPC ACL key long)
Notice: Changing ACL mode will take effect only after system restart.
Table 3 Command output
Field Descri
p
tion
Current acl mode ACL rule length limit mode that is currently effective.
Acl mode after system restart ACL rule length limit mode that is to be effective after system restart.
display acl resource
Syntax
display acl resource [ |{ begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
slot slot-number: Displays the usage of ACL rules on a card. The slot-number argument specifies the slot
number of the card. If no slot number is specified, the usage of ACL rules on the main board is displayed.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

13
Description
Use display acl resource to display the usage of ACL rules.
If a card does not support counting ACL rules, the command displays only the slot number of the card.
Examples
# Display the usage of ACL resources on all cards.
<Sysname> display acl resource
Slot: 2
Resource Total Reserved Configured Remaining Start End
Type Number Number Number Number Interface Interface
------------------------------------------------------------------------------
IPV4-ACL 16384 0 0 16384 GE2/1/1 GE2/1/8
IPV6-ACL 1024 0 0 1024 GE2/1/1 GE2/1/8
Table 4 Command output
Field Description
Slot Slot number of a card.
Resource Type Resource type.
Total Number Total number of ACL rules supported.
Reserved Number Number of reserved ACL rules.
Configured Number Number of ACL rules that have been applied.
Remaining Number Number of ACL rules that you can apply.
Start Interface Name of the start interface on the card.
End Interface Name of the end interface on the card.
display flow-template interface
Syntax
display flow-template interface [ interface-type interface-number ] [ |{ begin | exclude | include }
regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface-type interface-number: Specifies an interface by its type and number. If no interface is specified,
information about all user-defined flow templates applied to interfaces is displayed.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.

14
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display flow-template interface to display information about user-defined flow templates applied to
interfaces.
Examples
# Display information about all user-defined flow templates applied to interfaces.
<Sysname> display flow-template interface
Interface: GigabitEthernet2/1/1
user-defined flow template: basic
name:1, index:2, total reference counts:1
fields: service-cos
Table 5 Command output
Field Descri
p
tion
Interface Interface where the user-defined flow template is referenced.
user-defined flow template Type of the user-defined flow template.
name Name of the user-defined flow template.
index Index of the user-defined flow template.
total reference counts Total number of times that the user-defined flow template has been
referenced.
fields Fields included in the user-defined flow template.
display flow-template user-defined
Syntax
display flow-template user-defined [ flow-template-name ] [ |{ begin | exclude | include }
regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
flow-template-name: Name of a user-defined flow template, a case-insensitive string of 1 to 31 characters.
If no user-defined flow template name is specified, information about all user-defined flow templates is
displayed.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.