HP FlexNetwork HSR6800 Installation manual
HP HSR6800 Routers
A
CL and QoS
Command Reference
Part number: 5998-4510
Software version: HSR6800-CMW520-R3103
Document version: 6PW103-20130628
Legal and notice information
© Copyright 2013 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.
i
Contents
ACL commands ···························································································································································· 1
acl ··············································································································································································1
acl accelerate ···························································································································································2
acl copy·····································································································································································3
acl ipv6······································································································································································4
acl ipv6 copy····························································································································································5
acl ipv6 name···························································································································································5
acl name····································································································································································6
description·································································································································································6
display acl·································································································································································7
display acl accelerate··············································································································································9
display acl ipv6 ····················································································································································· 10
display acl resource ·············································································································································· 12
display time-range················································································································································· 13
reset acl counter ···················································································································································· 14
reset acl ipv6 counter············································································································································ 15
rule (Ethernet frame header ACL view) ··············································································································· 15
rule (IPv4 advanced ACL view)···························································································································· 17
rule (IPv4 basic ACL view)···································································································································· 21
rule (IPv6 advanced ACL view)···························································································································· 22
rule (IPv6 basic ACL view)···································································································································· 26
rule comment·························································································································································· 28
rule remark····························································································································································· 29
step·········································································································································································· 30
time-range ······························································································································································ 31
QoS policy commands ··············································································································································34
Class commands ···························································································································································· 34
display traffic classifier ········································································································································· 34
if-match ··································································································································································· 35
traffic classifier······················································································································································· 41
Traffic behavior commands··········································································································································· 42
accounting······························································································································································ 42
car··········································································································································································· 43
display traffic behavior········································································································································· 44
filter ········································································································································································· 46
gts············································································································································································ 46
gts percent······························································································································································ 47
redirect ··································································································································································· 48
remark dot1p ························································································································································· 49
remark drop-precedence ······································································································································ 50
remark dscp ··························································································································································· 50
remark ip-precedence ··········································································································································· 51
remark local-precedence ······································································································································ 52
remark qos-local-id ················································································································································ 53
traffic behavior ······················································································································································ 53
traffic-policy···························································································································································· 54
QoS policy configuration and application commands······························································································ 55
classifier behavior ················································································································································· 55
ii
display qos policy ················································································································································· 56
display qos policy interface ································································································································· 57
display qos vlan-policy ········································································································································· 61
qos apply policy (interface view) ························································································································ 63
qos apply policy (user-profile view) ···················································································································· 64
qos policy······························································································································································· 65
qos vlan-policy······················································································································································· 66
reset qos vlan-policy·············································································································································· 66
Priority mapping commands ·····································································································································68
Priority mapping table commands ······························································································································· 68
display qos map-table··········································································································································· 68
import······································································································································································ 69
qos map-table ························································································································································ 70
Port priority commands·················································································································································· 71
qos priority····························································································································································· 71
Per-port priority trust mode commands ························································································································ 72
display qos trust interface····································································································································· 72
qos trust ·································································································································································· 73
Traffic policing, GTS, and rate limit commands ······································································································74
Traffic policing commands············································································································································ 74
display qos car interface ······································································································································ 74
display qos carl ····················································································································································· 75
qos car···································································································································································· 76
qos carl··································································································································································· 77
GTS commands ······························································································································································ 79
display qos gts interface······································································································································· 79
qos gts ···································································································································································· 81
Rate limit commands······················································································································································ 82
display qos lr interface ········································································································································· 82
qos lr······································································································································································· 83
Packet resequencing commands ·································································································································· 84
qos resequencing ·················································································································································· 84
Congestion management commands ·······················································································································85
FIFO queuing commands ·············································································································································· 85
qos fifo queue-length············································································································································· 85
PQ commands ································································································································································ 85
display qos pq interface ······································································································································· 85
display qos pql ······················································································································································ 87
qos pq····································································································································································· 87
qos pql default-queue············································································································································ 88
qos pql protocol ···················································································································································· 89
qos pql queue························································································································································ 90
CQ commands ······························································································································································· 91
display qos cq interface ······································································································································· 91
display qos cql ······················································································································································ 92
qos cq····································································································································································· 93
qos cql default-queue ············································································································································ 94
qos cql protocol····················································································································································· 95
qos cql queue ························································································································································ 96
qos cql queue serving··········································································································································· 97
WFQ commands···························································································································································· 97
display qos wfq interface ····································································································································· 97
qos wfq··································································································································································· 99
iii
CBQ commands ···························································································································································100
display qos cbq interface ···································································································································100
qos max-bandwidth·············································································································································101
qos reserved-bandwidth ·····································································································································102
queue af ·······························································································································································103
queue ef································································································································································104
queue wfq ····························································································································································105
queue-length·························································································································································105
wred······································································································································································106
wred dscp ····························································································································································107
wred ip-precedence ············································································································································108
wred weighting-constant·····································································································································109
RTP queuing commands ··············································································································································110
display qos rtpq interface···································································································································110
qos rtpq ································································································································································111
QoS token commands ·················································································································································112
qos qmtoken·························································································································································112
Packet information pre-extraction commands ···········································································································113
qos pre-classify ····················································································································································113
Hardware congestion management commands ··································································································· 114
SP queuing commands ················································································································································114
display qos sp······················································································································································114
qos sp ···································································································································································115
WRR queuing commands············································································································································115
display qos wrr interface····································································································································115
qos wrr ·································································································································································116
qos wrr group sp·················································································································································117
qos wrr weight·····················································································································································118
WFQ commands··························································································································································119
display qos wfq interface ···································································································································119
qos bandwidth queue ·········································································································································120
qos wfq·································································································································································121
qos wfq weight ····················································································································································121
CBQ commands ···························································································································································122
queue af ·······························································································································································122
queue ef································································································································································123
queue wfq ····························································································································································124
wred······································································································································································124
Congestion avoidance commands························································································································· 126
WRED commands ························································································································································126
display qos wred interface·································································································································126
qos wred enable··················································································································································127
qos wred dscp ·····················································································································································128
qos wred ip-precedence ·····································································································································128
qos wred weighting-constant ·····························································································································129
WRED table commands···············································································································································130
display qos wred table ·······································································································································130
qos wred table·····················································································································································131
queue····································································································································································132
qos wred apply ···················································································································································133
QPPB commands····················································································································································· 135
bgp-policy ····························································································································································135
iv
MPLS QoS commands ············································································································································ 137
if-match mpls-exp ·················································································································································137
qos cql protocol mpls exp ··································································································································137
qos pql protocol mpls exp··································································································································138
remark mpls-exp ··················································································································································139
FR QoS configuration commands ·························································································································· 140
cbs·········································································································································································140
cir ··········································································································································································140
cir allow································································································································································141
congestion-threshold············································································································································142
display fr class-map·············································································································································143
display fr fragment-info·······································································································································144
display fr switch-table ·········································································································································146
ebs ········································································································································································147
fifo queue-length ··················································································································································148
fr class···································································································································································148
fr congestion-threshold ········································································································································149
fr de del································································································································································150
fr del inbound-interface·······································································································································151
fr del protocol ······················································································································································152
fr traffic-policing···················································································································································153
fr traffic-shaping···················································································································································153
fragment ·······························································································································································154
fr-class···································································································································································155
pq··········································································································································································155
pvc-pq ···································································································································································156
rtpq········································································································································································157
traffic-shaping adaptation ··································································································································158
Support and other resources ·································································································································· 159
Contacting HP ······························································································································································159
Subscription service ············································································································································159
Related information······················································································································································159
Documents····························································································································································159
Websites·······························································································································································159
Conventions ··································································································································································160
Index ········································································································································································ 162
1
ACL commands
acl
Use acl to create an IPv4 basic, IPv4 advanced, or Ethernet frame header ACL, and enter its view. If the
ACL has been created, you directly enter its view.
Use undo acl to delete the specified ACLs.
Syntax
acl number acl-number [ name acl-name ] [ match-order { auto | config } ]
undo acl { all | name acl-name | number acl-number }
Default
No ACL exists.
Views
System view
Default command level
2: System level
Parameters
number acl-number: Specifies the number of an access control list (ACL):
•2000 to 2999 for IPv4 basic ACLs
•3000 to 3999 for IPv4 advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
name acl-name: Assigns a name to the ACL for easy identification. The acl-name argument takes a
case-insensitive string of 1 to 63 characters. It must start with an English letter and to avoid confusion, it
cannot be all.
match-order: Sets the order in which ACL rules are compared against packets:
•auto—Compares ACL rules in depth-first order. The depth-first order differs with ACL categories. For
more information, see ACL and QoS Configuration Guide.
•config—Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has higher
priority. If no match order is specified, the config order applies by default.
all: Deletes all IPv4 basic, IPv4 advanced, or Ethernet frame header ACLs.
Usage guidelines
You can assign a name to an ACL only when you create it. After an ACL is created with a name, you
cannot rename it or remove its name.
You can change match order only for ACLs that do not contain any rules.
Ethernet frame header ACLs identifies Ethernet packets that are sent to the control plane (such as VTY and
local user services), but not those sent to the forwarding plane (such as QoS, firewall, and debug
services).
To display any ACLs you have created, use the display acl command.
2
Examples
# Create IPv4 basic ACL 2000, and enter its view.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000]
# Create IPv4 basic ACL 2001 with the name flow, and enter its view.
<Sysname> system-view
[Sysname] acl number 2001 name flow
[Sysname-acl-basic-2001-flow]
acl accelerate
Use acl accelerate to enable ACL acceleration for an IPv4 basic or IPv4 advanced ACL.
Use undo acl accelerate to disable ACL acceleration for an IPv4 basic or IPv4 advanced ACL.
Syntax
acl accelerate number acl-number
undo acl accelerate number acl-number
Default
ACL acceleration is disabled.
Views
System view
Default command level
2: System level
Parameters
number acl-number: Specifies the number of an existing ACL:
•2000 to 2999 for IPv4 basic ACL
•3000 to 3999 for IPv4 advanced ACL
Usage guidelines
ACL acceleration speeds up ACL lookup. The acceleration effect increases with the number of ACL rules.
ACL acceleration uses memory. To achieve the best trade-off between memory and ACL processing
performance, HP recommends enabling ACL acceleration for large ACLs, for example, ACLs that contain
more than 50 rules.
For example, when you use a large ACL for a session-based service, such as NAT or ASPF, you can
enable ACL acceleration to avoid session timeouts caused by ACL processing delays.
Enable ACL acceleration in an ACL after editing the ACL rules. ACL acceleration always uses ACL criteria
that have been set before it is enabled for rule matching. It does not synchronize with any subsequent
match criterion changes.
ACL acceleration is not available for ACLs that contain a non-contiguous wildcard mask.
Examples
# Enable ACL acceleration for IPv4 advanced ACL 3000.
<Sysname> system-view
3
[Sysname] acl accelerate number 3000
Related commands
display acl accelerate
acl copy
Use acl copy to create an IPv4 basic, IPv4 advanced, or Ethernet frame header ACL by copying an ACL
that already exists. The new ACL has the same properties and content as the source IPv4 ACL, but not the
same ACL number and name.
Syntax
acl copy { source-acl-number | name source-acl-name } to { dest-acl-number | name dest-acl-name }
Views
System view
Default command level
2: System level
Parameters
source-acl-number: Specifies an existing source ACL by its number:
•2000 to 2999 for IPv4 basic ACLs
•3000 to 3999 for IPv4 advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
name source-acl-name: Specifies an existing source ACL by its name. The source-acl-name argument
takes a case-insensitive string of 1 to 63 characters.
dest-acl-number: Assigns a unique number to the ACL you are creating. This number must be from the
same ACL category as the source ACL. Available value ranges include:
•2000 to 2999 for IPv4 basic ACLs
•3000 to 3999 for IPv4 advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
name dest-acl-name: Assigns a unique name to the ACL you are creating. The dest-acl-name takes a
case-insensitive string of 1 to 63 characters. It must start with an English letter, and to avoid confusion, it
cannot be all. For this ACL, the system automatically picks the smallest number from all available
numbers in the same ACL category as the source ACL.
Usage guidelines
You can assign a name to an ACL only when you create it. After an ACL is created with a name, you
cannot rename it or remove its name.
Examples
# Create IPv4 basic ACL 2002 by copying IPv4 basic ACL 2001.
<Sysname> system-view
[Sysname] acl copy 2001 to 2002
4
acl ipv6
Use acl ipv6 to create an IPv6 basic or IPv6 advanced ACL, and enter its ACL view. If the ACL has been
created, you directly enter its view.
Use undo acl ipv6 to delete the specified ACLs.
Syntax
acl ipv6 number acl6-number [ name acl6-name ] [ match-order { auto | config } ]
undo acl ipv6 { all | name acl6-name | number acl6-number }
Default
No ACL exists.
Views
System view
Default command level
2: System level
Parameters
number acl6-number: Specifies the number of an ACL:
•2000 to 2999 for IPv6 basic ACLs
•3000 to 3999 for IPv6 advanced ACLs
name acl6-name: Assigns a name to the ACL for easy identification. The acl6-name argument takes a
case-insensitive string of 1 to 63 characters. It must start with an English letter and to avoid confusion, it
cannot be all.
match-order: Sets the order in which ACL rules are compared against packets:
•auto—Compares ACL rules in depth-first order. The depth-first order differs with ACL categories. For
more information, see ACL and QoS Configuration Guide.
•config—Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has higher
priority. If no match order is specified, the config order applies by default.
all: Delete all IPv6 basic and IPv6 advanced ACLs.
Usage guidelines
You can assign a name to an ACL only when you create it. After an ACL is created, you cannot rename
it or remove its name.
You can change match order only for ACLs that do not contain any rules.
To display any ACLs you have created, use the display acl ipv6 command.
Examples
# Create IPv6 basic ACL 2000 and enter its view.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000]
# Create IPv6 basic ACL 2001 with the name flow, and enter its view.
<Sysname> system-view
[Sysname] acl ipv6 number 2001 name flow
5
[Sysname-acl6-basic-2001-flow]
acl ipv6 copy
Use acl ipv6 copy to create an IPv6 basic or IPv6 advanced ACL by copying an ACL that already exists.
The new ACL has the same properties and content as the source ACL, but not the same ACL number and
name.
Syntax
acl ipv6 copy { source-acl6-number | name source-acl6-name } to { dest-acl6-number | name
dest-acl6-name }
Views
System view
Default command level
2: System level
Parameters
source-acl6-number: Specifies an existing source ACL by its number:
•2000 to 2999 for IPv6 basic ACLs
•3000 to 3999 for IPv6 advanced ACLs
name source-acl6-name: Specifies an existing source ACL by its name. The source-acl6-name argument
takes a case-insensitive string of 1 to 63 characters.
dest-acl6-number: Assigns a unique number to the ACL you are creating. This number must be from the
same ACL category as the source ACL. Available value ranges include:
•2000 to 2999 for IPv6 basic ACLs
•3000 to 3999 for IPv6 advanced ACLs
name dest-acl6-name: Assigns a unique name to the ACL you are creating. The dest-acl6-name takes a
case-insensitive string of 1 to 63 characters. It must start with an English letter and to avoid confusion, it
cannot be all. For this ACL, the system automatically picks the smallest number from all available
numbers in the same ACL category as the source ACL.
Usage guidelines
You can assign a name to an ACL only when you create it. After an ACL is created with a name, you
cannot rename it or remove its name.
Examples
# Create IPv6 basic ACL 2002 by copying IPv6 basic ACL 2001.
<Sysname> system-view
[Sysname] acl ipv6 copy 2001 to 2002
acl ipv6 name
Use acl ipv6 name to enter the view of an IPv6 basic or IPv6 advanced ACL that has a name.
Syntax
acl ipv6 name acl6-name
6
Views
System view
Default command level
2: System level
Parameters
acl6-name: Specifies an IPv6 basic or IPv6 advanced ACL name, a case-insensitive string of 1 to 63
characters. It must start with an English letter. The ACL must already exist.
Examples
# Enter the view of IPv6 basic ACL flow.
<Sysname> system-view
[Sysname] acl ipv6 name flow
[Sysname-acl6-basic-2001-flow]
Related commands
acl ipv6
acl name
Use acl name to enter the view of an IPv4 basic, IPv4 advanced, or Ethernet frame header ACL that has
a name.
Syntax
acl name acl-name
Views
System view
Default command level
2: System level
Parameters
acl-name: Specifies an IPv4 basic, IPv4 advanced, or Ethernet frame header ACL name, a
case -insensitive string of 1 to 63 characters. It must start with an English letter. The ACL must already exist.
Examples
# Enter the view of IPv4 basic ACL flow.
<Sysname> system-view
[Sysname] acl name flow
[Sysname-acl-basic-2001-flow]
Related commands
acl
description
Use description to configure a description for an ACL.
Use undo description to remove the ACL description.
7
Syntax
description text
undo description
Default
An ACL has no ACL description.
Views
IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view
Default command level
2: System level
Parameters
text: ACL description, a case-sensitive string of 1 to 127 characters.
Examples
# Configure a description for IPv4 basic ACL 2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] description This is an IPv4 basic ACL.
# Configure a description for IPv6 basic ACL 2000.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] description This is an IPv6 basic ACL.
Related commands
•display acl
•display acl ipv6
display acl
Use display acl to display configuration and match statistics for IPv4 basic, IPv4 advanced, and Ethernet
frame header ACLs.
Syntax
display acl { acl-number | all | name acl-name } [ slot slot-number ] [ |{ begin | exclude | include }
regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
acl-number: Specifies an IPv4 ACL by its number:
•2000 to 2999 for IPv4 basic ACLs
•3000 to 3999 for IPv4 advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
8
all: Displays information for all IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs.
name acl-name: Specifies an ACL by its name. The acl-name argument takes a case-insensitive string of
1 to 63 characters. It must start with an English letter.
slot slot-number: Displays the match statistics for ACLs on a card. The slot-number argument specifies a
card by its slot number. If no slot is provided, the command displays the ACL configuration on the device.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
This command displays ACL rules in config or depth-first order, whichever is configured.
Examples
# Display configuration and match statistics for all IPv4 basic, IPv4 advanced, and Ethernet frame
header ACLs.
<Sysname> display acl all
Basic ACL 2000, named flow, 3 rules,
This is an IPv4 basic ACL.
ACL's step is 5
rule 0 permit
rule 5 permit source 1.1.1.1 0 (2 times matched)
rule 10 permit vpn-instance mk
Basic ACL 2001, named -none-, 3 rules, match-order is auto,
ACL's step is 5
rule 10 permit vpn-instance rd
rule 10 comment This rule is used in VPN rd.
rule 5 permit source 2.2.2.2 0
rule 0 permit
Table 1 Command output
Field Descri
p
tion
Basic ACL 2000 Category and number of the ACL. The following field
information is about IPv4 basic ACL 2000.
named flow The name of the ACL is flow. "-none-" means the ACL is not
named.
3 rules The ACL contains three rules.
match-order is auto
The match order for the ACL is auto, which sorts ACL rules in
depth-first order. This field is not present when the match order
is config.
This is an IPv4 basic ACL. Description of the ACL.
ACL's step is 5 The rule numbering step is 5.
9
Field Descri
p
tion
rule 0 permit Content of rule 0.
2 times matched
There have been two matches for the rule. The statistic counts
only ACL matches performed in software.
This field is not displayed when no packets have matched the
rule.
Uncompleted
Applying the rule to hardware failed because no sufficient
resources were available or the hardware does not support
the rule. This event might occur when you modify a rule in an
ACL that has been applied.
rule 10 comment This rule is used in VPN rd.
Comment about ACL rule 10.
display acl accelerate
Use display acl accelerate to display ACL acceleration status for the specified ACLs.
Syntax
display acl accelerate { acl-number | all } [ |{ begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
acl-number: Specifies an ACL number:
•2000 to 2999 for IPv4 basic ACL
•3000 to 3999 for IPv4 advanced ACL
all: Displays ACL acceleration status information for all IPv4 basic and IPv4 advanced ACLs.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display ACL acceleration status for the specified IPv4 ACL or all IPv4 basic and IPv4 advanced ACLs.
<Sysname> display acl accelerate all
Status: UTD -- up to date, OOD -- out of date
Accelerate: ACC -- accelerated, UNACC -- unaccelerated
Group Accelerate Status
--------------------------------------------------
2000 ACC UTD
10
3000 ACC OOD
3001 ACC UTD
3002 UNACC UTD
Table 2 Command output
Field Descri
p
tion
Group ACL number.
Accelerate
Whether ACL acceleration is enabled:
•ACC—Enabled.
•UNACC—Disabled.
Status
Whether ACL acceleration is using up to date criteria for rule matching:
•UTD—The ACL criteria are up to date and have not changed since ACL acceleration was
enabled.
•OOD—The ACL criteria are out of date. This state is displayed, if you modified the ACL
after ACL acceleration was enabled. ACL acceleration matches packets against the old
criteria. To ensure correct packet matching, disable and re-enable ACL acceleration.
display acl ipv6
Use display acl ipv6 to display configuration and match statistics for IPv6 basic and IPv6 advanced
ACLs.
Syntax
display acl ipv6 { acl6-number | all | name acl6-name } [ slot slot-number ] [ |{ begin | exclude |
include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
acl6-number: Specifies an ACL by its number:
•2000 to 2999 for IPv6 basic ACLs
•3000 to 3999 for IPv6 advanced ACLs
all: Displays information for all IPv6 basic and IPv6 advanced ACLs.
name acl6-name: Specifies an ACL by its name. The acl6-name argument takes a case-insensitive string
of 1 to 63 characters. It must start with an English letter.
slot slot-number: Displays the match statistics for ACLs on a card. The slot-number argument represents
the slot number of the card. If no slot number is provided, the command displays ACL configuration on
the device.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
11
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
This command displays ACL rules in config or depth-first order, whichever is configured.
Examples
# Display configuration and match statistics for the specified IPv6 ACL or all IPv6 basic and IPv6
advanced ACLs.
<Sysname> display acl ipv6 all
Basic IPv6 ACL 2000, named flow, 3 rules,
This is an IPv6 basic ACL.
ACL's step is 5
rule 0 permit
rule 5 permit source 1::/64 (2 times matched)
rule 10 permit vpn-instance mk
Basic IPv6 ACL 2001, named -none-, 3 rules, match-order is auto,
ACL's step is 5
rule 10 permit vpn-instance rd
rule 10 comment This rule is in VPN rd.
rule 5 permit source 1::/64
rule 0 permit
Table 3 Command output
Field Descri
p
tion
Basic IPv6 ACL 2000 Category and number of the ACL. The following field information is
about this IPv6 basic ACL 2000.
named flow The name of the ACL is flow. "-none-" means the ACL is not named.
3 rules The ACL contains three rules.
This is an IPv6 basic ACL. Description of the ACL.
match-order is auto The match order of the ACL is auto. This field is not displayed for an ACL
whose match order is config.
ACL's step is 5 The rule numbering step is 5.
rule 0 permit Content of rule 0.
2 times matched
There have been two matches for the rule. The statistic counts only ACL
matches performed by software.
This field is not displayed when no packets have matched the rule.
Uncompleted
Applying the rule to hardware failed because no sufficient resources
were available or the hardware does not support the rule. This event
might occur when you modify a rule in an ACL that has been applied.
rule 10 comment This rule is used in
VPN rd. Comment about ACL rule 10.
12
display acl resource
Use display acl resource to display the usage of ACL rules.
Syntax
display acl resource [slot slot-number ] [ |{ begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
slot slot-number: Displays the usage of ACL rules on a card. The slot-number argument specifies the slot
number of the card. If no slot number is specified, the usage of ACL rules on the main board is displayed.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
If a card does not support counting for ACL rules, the command displays only the slot number of the card.
Examples
# Display the usage of ACL rules for slot 7.
<Sysname> display acl resource slot 7
Interface:
GE7/0/0 to GE7/0/23
--------------------------------------------------------------------------------
Type Total Reserved Configured Remaining
--------------------------------------------------------------------------------
VFP ACL 1024 0 24 1000
IFP ACL 4096 0 87 4009
IFP Meter 2048 0 31 2017
IFP Counter 2048 0 31 2017
EFP ACL 512 0 0 512
EFP Meter 256 0 0 256
EFP Counter 512 0 0 512
Interface:
GE7/0/24 to GE7/0/47
--------------------------------------------------------------------------------
Type Total Reserved Configured Remaining
--------------------------------------------------------------------------------
VFP ACL 1024 0 24 1000
IFP ACL 4096 0 87 4009
IFP Meter 2048 0 31 2017
13
IFP Counter 2048 0 31 2017
EFP ACL 512 0 0 512
EFP Meter 256 0 0 256
EFP Counter 512 0 0 512
Table 4 Command output
Field Descri
p
tion
Interface Interface name formed by interface type and interface number.
Type
Resource type:
•VFP ACL—ACL rules for QinQ before Layer 2 forwarding
•IFP ACL—ACL rules applied to inbound traffic
•IFP Meter—Traffic policing rules for inbound traffic
•IFP Counter—Traffic counting rules for inbound traffic
•EFP Meter—Traffic policing rules for outbound traffic
•EFP Counter—Traffic counting rules for outbound traffic
Total Total number of ACL rules supported.
Reserved Number of reserved ACL rules.
Configured Number of ACL rules that have been applied.
Remaining Number of ACL rules that you can apply.
display time-range
Use display time-range to display the configuration and status of the specified time range or all time
ranges.
Syntax
display time-range {time-range-name | all } [ |{ begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
time-range-name: Specifies a time range name, a case-insensitive string of 1 to 32 characters. It must
start with an English letter.
all: Displays the configuration and status of all existing time ranges.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
14
Examples
# Display the configuration and status of time range t4.
<Sysname> display time-range t4
Current time is 17:12:34 4/13/2010 Tuesday
Time-range : t4 ( Inactive )
10:00 to 12:00 Mon
14:00 to 16:00 Wed
from 00:00 1/1/2010 to 00:00 2/1/2010
from 00:00 6/1/2010 to 00:00 7/1/2010
Table 5 Command output
Field Descri
p
tion
Current time Current system time.
Time-range Configuration and status of the time range, including its name,
status (active or inactive), and start time and end time.
reset acl counter
Use reset acl counter to clear statistics for one or all IPv4 basic, IPv4 advanced, and Ethernet frame
header ACLs.
Syntax
reset acl counter { acl-number | all | name acl-name }
Views
User view
Default command level
2: System level
Parameters
acl-number: Specifies an ACL by its number:
•2000 to 2999 for IPv4 basic ACLs
•3000 to 3999 for IPv4 advanced ACLs
•4000 to 4999 for Ethernet frame header ACLs
all: Clears statistics for all IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs.
name acl-name: Specifies an ACL by its name. The acl-name argument takes a case-insensitive string of
1 to 63 characters. It must start with an English letter.
Examples
# Clear statistics for IPv4 basic ACL 2001.
<Sysname> reset acl counter 2001
Related commands
display acl
Other manuals for FlexNetwork HSR6800
4
Table of contents
Other HP Network Router manuals
HP
HP VSR1000 Installation manual
HP
HP FlexNetwork HSR6600 User manual
HP
HP FlexNetwork MSR 954 User manual
HP
HP FlexFabric 5930 Series User manual
HP
HP MSR93x Series User manual
HP
HP 5920 User manual
HP
HP MSR930 3G User manual
HP
HP FlexNetwork MSR3044 Assembly instructions
HP
HP StorageWorks M2402 User manual
HP
HP MSR SERIES Installation manual
HP
HP J4093A User manual
HP
HP MSR SERIES Installation manual
HP
HP MSR2000 Series User manual
HP
HP MSR SERIES Installation manual
HP
HP 5900 User manual
HP
HP StorageWorks Edge Switch 2/12 User manual
HP
HP ProCurve Series 2600 User manual
HP
HP VSR1000 User manual
HP
HP ProCurve 1410-24G User manual
HP
HP 5800 User instructions
