For feedback and comments:
documentation.feedback@alcatel-lucent.com

Table of Contents Previous Next Index PDF

Show Commands
dhcp
Syntax
 
dhcp [filter-id]
Context
 
show>filter
Description
 
This command displays DHCP filter information.
*B:TechPubs>config# show filter dhcp
===============================================================================
DHCP Filters
===============================================================================
Filter-Id   Applied Description
-------------------------------------------------------------------------------
10          No      test-dhcp-filter
-------------------------------------------------------------------------------
Num filter entries: 1
===============================================================================
*B:TechPubs>config#
 
 
*B:TechPubs>config# show filter dhcp 10
===============================================================================
DHCP Filter
===============================================================================
Filter-Id    : 10                       Applied      : No
Entries      : 0
Description  : test-dhcp-filter
-------------------------------------------------------------------------------
Filter Match Criteria
-------------------------------------------------------------------------------
No Match Criteria Found
===============================================================================
*B:TechPubs>config#
dhcp6
Syntax
 
dhcp [<filter-id>]
Context
 
show>filter
Description
 
This command displays DHCP6 filter information.
download-failed
Syntax
 
download-failed
Context
 
show>filter
Description
 
This command shows all filter entries for which the download has failed.
Output
 
download-failed Output
The following table describes the filter download-failed output.
Label
Description  
Filter-type
Displays the filter type.
Filter-ID
Displays the ID of the filter.
Filter-Entry
Displays the entry number of the filter.
Sample Output
A:ALA-48# show filter download-failed
============================================
Filter entries for which download failed
============================================
Filter-type    Filter-Id      Filter-Entry
--------------------------------------------
ip	1	10
============================================
A:ALA-48#
ip
Syntax
 
ip
ip embedded [inactive]
ip ip-filter-id embedded [inactive]
ip ip-filter-id [detail]
ip ip-filter-id associations
ip ip-filter-id type entry-type
ip ip-filter-id counters [type entry-type]
ip ip-filter-id entry entry-id counters
ip ip-filter-id entry entry-id [detail]
Context
 
show>filter
Description
 
This command shows IP filter information.
Parameters
 
ip-filter-id
Displays detailed information for the specified filter ID and its filter entries.
Values
1 — 65535
entry entry-id
Displays information on the specified filter entry ID for the specified filter ID only.
Values
1 — 65535
associations
Appends information as to where the filter policy ID is applied to the detailed filter policy ID output.
counters
Displays counter information for the specified filter ID. Note that egress counters count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
type entry-type
specifies type of filter entry to display, values:
Values
fixed, radius-insert, credit-control-insert, flowspec, embedded, radius-shared
embedded [failed]
Shows all embeddings, optionally shows failed embedding only, if filter-id is not specified shows all embedded filters.
Output
 
Show Filter (no filter-id specified)
The following table describes the command output for the command when no filter ID is specified.
 
 
Label
Description  
Filter Id
The IP filter ID
Scope
Template
The filter policy is of type template.
 
Exclusive
The filter policy is of type exclusive.
Applied
No
The filter policy ID has not been applied.
 
Yes
The filter policy ID is applied.
Description
The IP filter policy description.
In
Shows embedding filter index
From
Shows embedded filters included
Priority
Shows priority of embedded filter
Inserted
Shows embedded/total number of entries from embedded filter
Status:
OK—embedding operation successful, if any entries are overwritten this will also be indicated.
Failed—embedding failed, the reason is displayed (out of resources).
Sample Output 
A:ALA-49# show filter ip
===============================================================================
Configured IP Filters                                            Total:     2
===============================================================================
Filter-Id   Scope     Applied Description
-------------------------------------------------------------------------------
5           Template  Yes
6           Template  Yes
 
===============================================================================
Host Common IP Filters                                           Total:     2
===============================================================================
Filter-Id                     Description
-------------------------------------------------------------------------------
5:P4                          Auto-created PCC-Rule Ingress Filter
6:P5                          Auto-created PCC-Rule Egress Filter
===============================================================================
Num IP filters: 4
===============================================================================
 
 
A:ALA-49#
*A:Dut-C>config>filter# show filter ip 
===============================================================================
IP Filters                                                       Total:     2
===============================================================================
Filter-Id   Scope    Applied Description
-------------------------------------------------------------------------------
10001       Template Yes     
fSpec-1     Template Yes     BGP FlowSpec filter for the Base router
-------------------------------------------------------------------------------
Num IP filters: 2
===============================================================================
 
 
*A:Dut-C>config>filter# show filter ip embedded
================================================
IP Filter embedding
================================================
In		From    	Priority 			Inserted    	Status
----------------------------------------------------------------------------------
10		2       		50        	1/1         	OK
		1       		100       	1/2         	OK- 1 entry overwritten
 
20		2       		100       	0/5         	Failed – out of resources
================================================
*A:Dut-C>config>filter# 
 
 
show filter ip "5:P4"
===============================================================================
IP Filter
===============================================================================
Filter Id    : 5:P4                             Applied        : Yes
Scope        : Template                         Def. Action    : Forward
System filter: Unchained
Radius Ins Pt: n/a
CrCtl. Ins Pt: n/a
RadSh. Ins Pt: n/a
PccRl. Ins Pt: 40000 (size 10000)
Entries      : 0
PccRl Entries: 11
Description  : Auto-created PCC-Rule Ingress Filter
-------------------------------------------------------------------------------
Filter Match Criteria : IP
-------------------------------------------------------------------------------
Entry        : 40000 - inserted on ingress by PCC-Rule
Description  : Inserted (ingress) entry for pcc-rule RULE_ingress_DROP
Log Id       : n/a
Src. IP      : 0.0.0.0/0
Src. Port    : n/a
Dest. IP     : 75.24.24.0/32
Dest. Port   : n/a
Protocol     : 6                                Dscp           : cp60
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Src Route Opt  : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Option-pres  : Off
Egress PBR   : Undefined
Match action : Drop
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
 
Entry        : 40001 - inserted on ingress by PCC-Rule
Description  : Inserted (ingress) entry for pcc-rule RULE_ingress_FC_HTTP
Log Id       : n/a
Src. IP      : 0.0.0.0/0
Src. Port    : n/a
Dest. IP     : 75.24.24.4/32
Dest. Port   : n/a
Protocol     : 6                                Dscp           : cp60
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Src Route Opt  : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Option-pres  : Off
Egress PBR   : Undefined
Match action : HTTP-Redirect (http://pcc.portal.com/RULE_ingress_FC_HTTP)
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
 
Entry        : 40002 - inserted on ingress by PCC-Rule
Description  : Inserted (ingress) entry for pcc-rule RULE_ingress_FC_RDR
Log Id       : n/a
Src. IP      : 0.0.0.0/0
Src. Port    : n/a
Dest. IP     : 75.24.24.5/32
Dest. Port   : n/a
Protocol     : 6                                Dscp           : cp60
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Src Route Opt  : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Option-pres  : Off
Egress PBR   : Undefined
Match action : Forward
Next Hop     : 10.10.10.10 (Indirect)
PBR Down Act : Drop (entry-default)
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
…
===============================================================================
 
 
show filter ip "5:P4" associations 
===============================================================================
IP Filter
===============================================================================
Filter Id    : 5:P4                             Applied        : Yes
Scope        : Template                         Def. Action    : Forward
System filter: Unchained
Radius Ins Pt: n/a
CrCtl. Ins Pt: n/a
RadSh. Ins Pt: n/a
PccRl. Ins Pt: 40000 (size 10000)
Entries      : 0
PccRl Entries: 11
Description  : Auto-created PCC-Rule Ingress Filter
-------------------------------------------------------------------------------
Filter Association : IP
-------------------------------------------------------------------------------
Subscriber Hosts
- Sub : 1/1/3:1.1|00:00:00:00:00:01 (Ingress)
   - sap : 1/1/3:1.1
   - IP Address : 22.1.0.1
-------------------------------------------------------------------------------
Filter associated with IOM: 1
===============================================================================
 
 
Output
 
Show Filter (with filter-id specified)
The following table describes the command output for the command when a filter ID is specified.
Label
Description  
Filter Id
The IP filter policy ID.
Scope
Template
The filter policy is of type template.
 
Exclusive
The filter policy is of type exclusive.
Entries
The number of entries configured in this filter ID.
Description
The IP filter policy description.
Applied
No
The filter policy ID has not been applied.
 
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
 
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Filter Match
Criteria
IP
Indicates the filter is an IP filter policy.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
Log Id
The filter log ID.
Src. IP
The source IPv6 address and prefix length match criterion.
Dest. IP
The destination IPv6 address and prefix length match criterion.
Next-header
The next header ID for the match criteria. Undefined indicates no next-header specified.
ICMP Type
The ICMP type match criterion. Undefined indicates no ICMP type specified.
Fragment
False
Configures a match on all non-fragmented IP packets.
 
True
Configures a match on all fragmented IP packets.
 
Off
Fragments are not a matching criteria. All fragments and non-fragments implicitly match.
Sampling
Off
Specifies that traffic sampling is disabled.
 
On
Specifies that traffic matching the associated IP filter entry is sampled.
IP-Option
Specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria.
TCP-syn
False
Configures a match on packets with the SYN flag set to false.
 
True
Configured a match on packets with the SYN flag set to true.
 
Off
The state of the TCP SYN flag is not considered as part of the match criteria.
Match action
Default
The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified.
 
Drop
Drop packets matching the filter entry.
 
Forward
The explicit action to perform is forwarding of the packet.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Src. Port
The source TCP, UDP, or SCTP port number, port range, or port match list.
Dest. Port
The destination TCP, UDP, or SCTP port number, port range, or port match list.
Dscp
The DiffServ Code Point (DSCP) name.
ICMP Code
The ICMP code field in the ICMP header of an IP packet.
Option-present
Off
Specifies not to search for packets that contain the option field or have an option field of zero.
 
On
Matches packets that contain the option field or have an option field of zero be used as IP filter match criteria.
Int. Sampling
Off
Interface traffic sampling is disabled.
 
On
Interface traffic sampling is enabled.
Multiple Option
Off
The option fields are not checked.
 
On
Packets containing one or more option fields in the IP header will be used as IP filter match criteria.
TCP-ack
False
Configures a match on packets with the ACK flag set to false.
 
True
Configurs a match on packets with the ACK flag set to true.
 
Off
The state of the TCP ACK flag is not considered as part of the match criteria. as part of the match criteria.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
Sample Output
A:ALA-49>config>filter# show filter ip 3
===============================================================================
IP Filter
===============================================================================
Filter Id    : 3                                Applied        : Yes
Scope        : Template                         Def. Action    : Drop
Entries      : 1
-------------------------------------------------------------------------------
Filter Match Criteria : IP
-------------------------------------------------------------------------------
Entry        : 10
Log Id       : n/a
Src. IP      : 10.1.1.1/24                      Src. Port      : None
Dest. IP     : 0.0.0.0/0                        Dest. Port     : None
Protocol     : 2                                Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
TCP-syn      : Off                              TCP-ack        : Off
Match action : Drop
Ing. Matches : 0                                Egr. Matches   : 0
===============================================================================
A:ALA-49>config>filter# 
 
*A:Dut-C>config>filter# show filter ip fSpec-1 associations 
===============================================================================
IP Filter
===============================================================================
Filter Id    : fSpec-1                          Applied        : Yes
Scope        : Template                         Def. Action    : Forward
Radius Ins Pt: n/a                              
CrCtl. Ins Pt: n/a                              
Entries      : 2 (insert By Bgp)
Description  : BGP FlowSpec filter for the Base router
-------------------------------------------------------------------------------
Filter Association : IP
-------------------------------------------------------------------------------
Service Id   : 1                                Type           : IES
- SAP    1/1/3:1.1   (merged in ip-fltr 10001) 
===============================================================================
*A:Dut-C>config>filter# 
 
 
*A:Dut-C>config>filter# show filter ip 10001 
===============================================================================
IP Filter
===============================================================================
Filter Id    : 10001                            Applied        : Yes
Scope        : Template                         Def. Action    : Drop
Radius Ins Pt: n/a                              
CrCtl. Ins Pt: n/a                              
Entries      : 1                                
BGP Entries  : 2                                
Description  : (Not Specified)
-------------------------------------------------------------------------------
Filter Match Criteria : IP
-------------------------------------------------------------------------------
Entry        : 1  
Description  : (Not Specified)
Log Id       : n/a                              
Src. IP      : 0.0.0.0/0                        Src. Port      : None
Dest. IP     : 0.0.0.0/0                        Dest. Port     : None
Protocol     : 6                                Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Option-present : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Match action : Forward                          
Next Hop     : Not Specified                    
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
 
Entry        : fSpec-1-32767  - inserted by BGP FLowSpec
Description  : (Not Specified)
Log Id       : n/a                              
Src. IP      : 0.0.0.0/0                        Src. Port      : None
Dest. IP     : 0.0.0.0/0                        Dest. Port     : None
Protocol     : 6                                Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Option-present : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Match action : Drop                             
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
 
Entry        : fSpec-1-49151  - inserted by BGP FLowSpec
Description  : (Not Specified)
Log Id       : n/a                              
Src. IP      : 0.0.0.0/0                        Src. Port      : None
Dest. IP     : 0.0.0.0/0                        Dest. Port     : None
Protocol     : 17                               Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Option-present : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Match action : Drop                             
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
 
===============================================================================
*A:Dut-C>config>filter#
===============================================================================
Configured IP Filters                                            Total:     4
===============================================================================
Filter-Id   Scope     Applied Description
-------------------------------------------------------------------------------
1           Template  No      
5           Exclusive No      
10          Template  Yes     
100         Embedded  N/A     
===============================================================================
System IP Filters                                                Total:     1
===============================================================================
Filter-Id                     Description
-------------------------------------------------------------------------------
_tmnx_ofs_test                of-switch 'test' embedded filter
-------------------------------------------------------------------------------
Num IP filters: 5
==============================================================================
*A:bksim4001>show>filter# ip _tmnx_ofs_test 
 
===============================================================================
IP Filter
===============================================================================
Filter Id    : _tmnx_ofs_test                   Applied        : No
Scope        : Embedded                         Def. Action    : Drop
Radius Ins Pt: n/a                              
CrCtl. Ins Pt: n/a                              
RadSh. Ins Pt: n/a                              
Entries      : 1
Description  : of-switch 'test' embedded filter
-------------------------------------------------------------------------------
Filter Match Criteria : IP
-------------------------------------------------------------------------------
Entry        : 1000  
Description  : (Not Specified)
Log Id       : n/a                              
Src. IP      : 0.0.0.0/0
Src. Port    : n/a
Dest. IP     : 0.0.0.0/0
Dest. Port   : n/a
Protocol     : Undefined                        Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Src Route Opt  : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Option-pres  : Off                              
Match action : Drop
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
 
Output
 
Show Filter (with time-range specified)
If a time-range is specified for a filter entry, the following is displayed.
A:ALA-49# show filter ip  10
===============================================================================
IP Filter
===============================================================================
Filter Id    : 10                               Applied        : No
Scope        : Template                         Def. Action    : Drop
Entries      : 2
-------------------------------------------------------------------------------
Filter Match Criteria : IP
-------------------------------------------------------------------------------
Entry        : 1010
time-range   : day                              Cur. Status    : Inactive
Log Id       : n/a
Src. IP      : 0.0.0.0/0                        Src. Port      : None
Dest. IP     : 10.10.100.1/24                   Dest. Port     : None
Protocol     : Undefined                        Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Option-present : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Match action : Forward
Next Hop     : 138.203.228.28
Ing. Matches : 0                                Egr. Matches   : 0
 
Entry        : 1020
time-range   : night                            Cur. Status    : Active
Log Id       : n/a
Src. IP      : 0.0.0.0/0                        Src. Port      : None
Dest. IP     : 10.10.1.1/16                     Dest. Port     : None
Protocol     : Undefined                        Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Option-present : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Match action : Forward
Next Hop     : 172.22.184.101
Ing. Matches : 0                                Egr. Matches   : 0
=============================================================================== 
A:ALA-49#
Output
 
Show Filter Associations
The following table describes the fields that display when the associations keyword is specified.
Label
Description  
Filter Id
The IP filter policy ID.
Scope
Template
The filter policy is of type Template.
Exclusive
The filter policy is of type Exclusive.
Entries
The number of entries configured in this filter ID.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Service Id
The service ID on which the filter policy ID is applied.
SAP
The Service Access Point on which the filter policy ID is applied.
(Ingress)
The filter policy ID is applied as an ingress filter policy on the interface.
(Egress)
The filter policy ID is applied as an egress filter policy on the interface.
Type
The type of service of the service ID.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete as no action was specified.
Log Id
The filter log ID.
Src. IP
The source IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry.
Dest. IP
The destination IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry.
Protocol
The protocol ID for the match criteria. Undefined indicates no protocol specified.
ICMP Type
The ICMP type match criterion. Undefined indicates no ICMP type specified.
Fragment
False
Configures a match on all non-fragmented IP packets.
True
Configures a match on all fragmented IP packets.
 
Off
Fragments are not a matching criteria. All fragments and nonfragments implicitly match.
Sampling
Off
Specifies that traffic sampling is disabled.
On
Specifies that traffic matching the associated IP filter entry is sampled.
IP-Option
Specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria.
TCP-syn
False
Configures a match on packets with the SYN flag set to false.
True
Configured a match on packets with the SYN flag set to true.
 
Off
The state of the TCP SYN flag is not considered as part of the match criteria.
Match action
Default
The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete (no action was specified).
Drop
Drop packets matching the filter entry.
Forward
The explicit action to perform is forwarding of the packet. If the action is Forward, then if configured the nexthop information should be displayed, including Nexthop: <IP address>, Indirect: <IP address> or Interface: <IP interface name>.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Src. Port
The source TCP, UDP, or SCTP port number, port range, or port match list.
Dest. Port
The destination TCP, UDP, or SCTP port number, port range, or port match list.
Dscp
The DiffServ Code Point (DSCP) name.
ICMP Code
The ICMP code field in the ICMP header of an IP packet.
Option-present
Off
Specifies not to search for packets that contain the option field or have an option field of zero.
On
Matches packets that contain the option field or have an option field of zero be used as IP filter match criteria.
Int. Sampling
Off
Interface traffic sampling is disabled.
On
Interface traffic sampling is enabled.
Multiple Option
Off
The option fields are not checked.
On
Packets containing one or more option fields in the IP header will be used as IP filter match criteria.
TCP-ack
False
Configures a match on packets with the ACK flag set to false.
True
configures a match on packets with the ACK flag set to true.
 
Off
The state of the TCP ACK flag is not considered as part of the match criteria.h criteria.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
Sample Output
A:ALA-49# show filter ip 1 associations
===============================================================================
IP Filter
===============================================================================
Filter Id    : 1                                Applied        : Yes
Scope        : Template                         Def. Action    : Drop
Entries      : 1
-------------------------------------------------------------------------------
Filter Association : IP
-------------------------------------------------------------------------------
Service Id   : 1001                             Type           : VPLS
 - SAP    1/1/1:1001   (Ingress)
Service Id   : 2000                             Type           : IES
 - SAP    1/1/1:2000   (Ingress)
===============================================================================
Filter Match Criteria : IP
-------------------------------------------------------------------------------
Entry        : 10
Log Id       : n/a
Src. IP      : 10.1.1.1/24                      Src. Port      : None
Dest. IP     : 0.0.0.0/0                        Dest. Port     : None
Protocol     : 2                                Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
Fragment     : Off                              Option-present : Off
Sampling     : Off                              Int. Sampling  : On
IP-Option    : 0/0                              Multiple Option: Off
TCP-syn      : Off                              TCP-ack        : Off
Match action : Drop
Ing. Matches : 0                                Egr. Matches   : 0
===============================================================================
A:ALA-49#
 
Output
 
Show Filter Associations (with TOD-suite specified)
If a filter is referred to in a TOD Suite assignment, it is displayed in the show filter associations command output:
 
A:ALA-49# show filter ip 160 associations
===============================================================================
IP Filter
===============================================================================
Filter Id    : 160                              Applied        : No
Scope        : Template                         Def. Action    : Drop
Entries      : 0
-------------------------------------------------------------------------------
Filter Association : IP
-------------------------------------------------------------------------------
Tod-suite "english_suite"
 - ingress, time-range "day" (priority 5)
=============================================================================== 
A:ALA-49#
 
Output
 
Show Filter Counters
The following table describes the output fields when the counters keyword is specified..
Label
Description  
IP Filter
Filter Id
The IP filter policy ID.
Scope
Template
The filter policy is of type Template.
Exclusive
The filter policy is of type Exclusive.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Filter Match
Criteria
IP
Indicates the filter is an IP filter policy.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
 
Note that egress counters count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
 
Sample Output
*A:ALA-48# show filter ipv6 100 counters
===============================================================================
IPv6 Filter
===============================================================================
Filter Id    : 100                              Applied        : No
Scope        : Template                         Def. Action    : Forward
Entries      : 1
Description  : IPv6 filter configuration
-------------------------------------------------------------------------------
Filter Match Criteria : IPv6
-------------------------------------------------------------------------------
Entry        : 10
Ing. Matches : 9788619 pkts (978861900 bytes) 
Egr. Matches : 9788619 pkts (978861900 bytes) 
===============================================================================
*A:ALA-48#
ipv6
Syntax
 
ipv6
ipv6 embedded [inactive]
ipv6 ipv6-filter-id embedded [inactive]
ipv6 ipv6-filter-id [detail]
ipv6 ipv6-filter-id associations
ipv6 ipv6-filter-id type entry-type
ipv6 ipv6-filter-id counters [type entry-type]
ipv6 ipv6-filter-id entry entry-id counters
Context
 
show>filter
Description
 
This command shows IPv6 filter information.
Parameters
 
ipv6-filter-id
Displays detailed information for the specified IPv6 filter ID and filter entries.
Values
1 — 65535
entry entry-id
Displays information on the specified IPv6 filter entry ID for the specified filter ID.
Values
1 — 9999
associations
Appends information as to where the IPv6 filter policy ID is applied to the detailed filter policy ID output.
counters
Displays counter information for the specified IPv6 filter ID. Note that egress counters count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
embedded [failed]
Shows all embeddings, optionally shows failed embedding only, if filter-id is not specified shows all embedded filters.
type entry-type
specifies type of filter entry to display, values:
Values
fixed, radius-insert, credit-control-insert, flowspec, embedded, radius-shared
Output
 
Show Filter (no filter-id specified)
The following table describes the command output for the command when no filter ID is specified.
Label
Description  
Filter Id
The IP filter ID
Scope
Template
The filter policy is of type template.
Exclusive
The filter policy is of type exclusive.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Description
The IP filter policy description.
In
Shows embedding filter index
From
Shows embedded filters included
Priority
Shows priority of embedded filter
Inserted
Shows embedded/total number of entries from embedded filter
Status:
OK—embedding operation successful, if any entries are overwritten this will also be indicated.
Failed—embedding failed, the reason is displayed (out of resources).
In
Shows embedding filter index
Sample Output
A:ALA-48# show filter ipv6
===============================================================================
IP Filters
===============================================================================
Filter-Id Scope      Applied Description
-------------------------------------------------------------------------------
100       Template   Yes     test
200       Exclusive  Yes
-------------------------------------------------------------------------------
Num IPv6 filters: 2
===============================================================================
A:ALA-48# show filter ipv6 embedded
================================================
IP Filter embedding
================================================
In		From    	Priority 			Inserted    	Status
----------------------------------------------------------------------------------
10		2       		50        	1/1         	OK
		1       		100       	1/2         	OK- 1 entry overwritten
 
20		2       		100       	0/5         	Failed – out of resources
================================================
A:ALA-48#
===============================================================================
Configured IP Filters                                            Total:     4
===============================================================================
Filter-Id   Scope     Applied Description
-------------------------------------------------------------------------------
1           Template  No      
5           Exclusive No      
10          Template  Yes     
100         Embedded  N/A     
===============================================================================
System IP Filters                                                Total:     1
===============================================================================
Filter-Id                     Description
-------------------------------------------------------------------------------
_tmnx_ofs_test                of-switch 'test' embedded filter
-------------------------------------------------------------------------------
Num IP filters: 5
==============================================================================
 
Output
 
Show Filter (with filter-id specified)
The following table describes the command output for the command when a filter ID is specified.
Label
Description  
Filter Id
The IP filter policy ID.
Scope
Template
The filter policy is of type template.
Exclusive
The filter policy is of type exclusive.
Entries
The number of entries configured in this filter ID.
Description
The IP filter policy description.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Filter Match
Criteria
IP
Indicates the filter is an IP filter policy.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
Log Id
The filter log ID.
Src. IP
The source IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry.
Dest. IP
The destination IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry.
Protocol
The protocol ID for the match criteria. Undefined indicates no protocol specified.
ICMP Type
The ICMP type match criterion. Undefined indicates no ICMP type specified.
Fragment
False
Configures a match on all non-fragmented IP packets.
True
Configures a match on all fragmented IP packets.
 
Off
Fragments are not a matching criteria. All fragments and nonfragments implicitly match.
Sampling
Off
Specifies that traffic sampling is disabled.
On
Specifies that traffic matching the associated IP filter entry is sampled.
IP-Option
Specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria.
TCP-syn
False
Configures a match on packets with the SYN flag set to false.
True
Configured a match on packets with the SYN flag set to true.
 
Off
The state of the TCP SYN flag is not considered as part of the match criteria.
Match action
Default
The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
Drop
Drop packets matching the filter entry.
Forward
The explicit action to perform is forwarding of the packet. If the action is Forward, then if configured the nexthop information should be displayed, including Nexthop: <IP address>, Indirect: <IP address> or Interface: <IP interface name>.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Src. Port
The source TCP, UDP, or SCTP port number, port range, or port match list.
Dest. Port
The destination TCP, UDP, or SCTP port number, port range, or port match list.
Dscp
The DiffServ Code Point (DSCP) name.
ICMP Code
The ICMP code field in the ICMP header of an IP packet.
Option-present
Off
Specifies not to search for packets that contain the option field or have an option field of zero.
On
Matches packets that contain the option field or have an option field of zero be used as IP filter match criteria.
Int. Sampling
Off
Interface traffic sampling is disabled.
On
Interface traffic sampling is enabled.
Multiple Option
Off
The option fields are not checked.
On
Packets containing one or more option fields in the IP header will be used as IP filter match criteria.
TCP-ack
False
Configures a match on packets with the ACK flag set to false.
True
Configured a match on packets with the ACK flag set to true.
 
Off
The state of the TCP ACK flag is not considered as part of the match criteria.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
 
Sample Output
A:ALA-48# show filter ipv6 100
===============================================================================
IPv6 Filter
===============================================================================
Filter Id    : 100                              Applied        : Yes
Scope        : Template                         Def. Action    : Forward
Entries      : 1
Description : test
-------------------------------------------------------------------------------
Filter Match Criteria : IPv6
-------------------------------------------------------------------------------
Entry        : 10
Log Id       : 101
Src. IP      : ::/0                             Src. Port      : None
Dest. IP     : ::/0                             Dest. Port     : None
Next Header  : Undefined                        Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
TCP-syn      : Off                              TCP-ack        : Off
Match action : Drop
Ing. Matches : 0                                Egr. Matches   : 0
===============================================================================
A:ALA-48#
Output
 
Show Filter Associations
The following table describes the fields that display when the associations keyword is specified.
 
Label
Description  
Filter Id
The IPv6 filter policy ID.
Scope
Template
The filter policy is of type Template.
 
Exclusive
The filter policy is of type Exclusive.
Entries
The number of entries configured in this filter ID.
Applied
No
The filter policy ID has not been applied.
 
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
 
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Service Id
The service ID on which the filter policy ID is applied.
SAP
The Service Access Point on which the filter policy ID is applied.
(Ingress)
The filter policy ID is applied as an ingress filter policy on the interface.
(Egress)
The filter policy ID is applied as an egress filter policy on the interface.
Type
The type of service of the service ID.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified.
Log Id
The filter log ID.
Src. IP
The source IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry.
Dest. IP
The destination IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry.
Protocol
The protocol ID for the match criteria. Undefined indicates no protocol specified.
ICMP Type
The ICMP type match criterion. Undefined indicates no ICMP type specified.
Fragment
False
Configures a match on all non-fragmented IP packets.
 
True
Configures a match on all fragmented IP packets.
 
Off
Fragments are not a matching criteria. All fragments and nonfragments implicitly match.
Sampling
Off
Specifies that traffic sampling is disabled.
 
On
Specifies that traffic matching the associated IP filter entry is sampled.
IP-Option
Specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria.
TCP-syn
False
Configures a match on packets with the SYN flag set to false.
 
True
Configures a match on packets with the SYN flag set to true.
 
Off
The state of the TCP SYN flag is not considered as part of the match criteria.
Match action
Default
The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified.
 
Drop
Drop packets matching the filter entry.
 
Forward
The explicit action to perform is forwarding of the packet. If the action is Forward, then if configured the nexthop information should be displayed, including Nexthop: <IP address>, Indirect: <IP address> or Interface: <IP interface name>.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Src. Port
The source TCP, UDP, or SCTP port number, port range, or port match list.
Dest. Port
The destination TCP, UDP, or SCTP port number, port range, or port match list.
Dscp
The DiffServ Code Point (DSCP) name.
ICMP Code
The ICMP code field in the ICMP header of an IP packet.
Option-present
Off
Specifies not to search for packets that contain the option field or have an option field of zero.
 
On
Matches packets that contain the option field or have an option field of zero be used as IP filter match criteria.
Int. Sampling
Off
Interface traffic sampling is disabled.
 
On
Interface traffic sampling is enabled.
Multiple Option
Off
The option fields are not checked.
 
On
Packets containing one or more option fields in the IP header will be used as IP filter match criteria.
TCP-ack
False
Configures a match on packets with the ACK flag set to false.
 
True
Configured a match on packets with the ACK flag set to true.
 
Off
The state of the TCP ACK flag is not considered as part of the match criteria.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
 
Sample Output
A:ALA-48# show filter ipv6 1 associations
===============================================================================
IPv6 Filter
===============================================================================
Filter Id    : 1                                Applied        : Yes
Scope        : Template                         Def. Action    : Drop
Entries      : 1
-------------------------------------------------------------------------------
Filter Association : IPv6
-------------------------------------------------------------------------------
Service Id   : 2000                             Type           : IES
 - SAP    1/1/1:2000   (Ingress)
===============================================================================
Filter Match Criteria : IPv6
-------------------------------------------------------------------------------
Entry        : 10
Log Id       : 101
Src. IP      : ::/0                             Src. Port      : None
Dest. IP     : ::/0                             Dest. Port     : None
Next Header  : Undefined                        Dscp           : Undefined
ICMP Type    : Undefined                        ICMP Code      : Undefined
TCP-syn      : Off                              TCP-ack        : Off
Match action : Drop
Ing. Matches : 0                                Egr. Matches   : 0
===============================================================================
A:ALA-48#
 
Output
 
Show Filter Counters
The following table describes the output fields when the counters keyword is specified..
Label
Description  
IP Filter
Filter Id
The IP filter policy ID.
Scope
Template
The filter policy is of type template.
Exclusive
The filter policy is of type exclusive.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Filter Match
Criteria
IP
Indicates the filter is an IP filter policy.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
 
Note that egress counters count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
Sample Output
A:ALA-48# show filter ipv6 8 counters
===============================================================================
IPv6 Filter
===============================================================================
Filter Id    : 8                                Applied        : Yes
Scope        : Template                         Def. Action    : Forward
Entries      : 4
Description  : Description for Ipv6 Filter Policy id # 8
-------------------------------------------------------------------------------
Filter Match Criteria : IPv6
-------------------------------------------------------------------------------
Entry        : 5
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
  
Entry        : 6
Ing. Matches : 0 pkts
Egr. Matches : 0 pkts
  
Entry        : 8
Ing. Matches : 160 pkts (14400 bytes)
Egr. Matches : 80 pkts (6880 bytes)
                                       
Entry        : 10
Ing. Matches : 80 pkts (7200 bytes)
Egr. Matches : 80 pkts (6880 bytes)
  
====================================================================================A:ALA-48#
log
Syntax
 
log log-id [match string] [bindings]
Context
 
show>filter
Description
 
This command shows the contents of a memory-based or a file-based filter log.
If the optional keyword match and string parameter are given, the command displays the given filter log from the first occurence of the given string.
Parameters
 
log-id
The filter log ID destination expressed as a decimal integer.
Values
101 — 199
match string
Specifies to start displaying the filter log entries from the first occurence of string.
bindings
Displays the number of filter logs currently instantiated.
Output
 
Log Message Formatting
Each filter log entry contains the following information in case summary log feature is not active (as appropriate).
 
Label
Description  
yyyy/mm/dd hh:mm:ss
The date and timestamp for the log filter entry where yyyy is the year, mm is the month, dd is the day, hh is the hour, mm is the minute and ss is the second.
Filter
The filter ID and the entry ID which generated the filter log entry in the form Filter_ID:Entry_ID.
Desc
The description of the filter entry ID which generated the filter log entry.
Interface
The IP interface on which the filter ID and entry ID was associated which generated the filter log entry.
Action
The action of the filter entry on the logged packet.
Src MAC
The source MAC address of the logged packet.
Dst MAC
The destination MAC of the logged packet.
EtherType
The Ethernet type of the logged Ethernet type II packet.
Src IP
The source IP address of the logged packet. The source port will be displayed after the IP address as appropriate separated with a colon.
Dst IP
The destination IP address of the logged packet. The source port will be displayed after the IP address as appropriate separated with a colon.
Flags
(IP flags)
M
The more fragments IP flag is set in the logged packet.
DF
The do not fragment IP flag is set in the logged packet.
TOS
The TOS byte value in the logged packet.
Protocol
The IP protocol of the logged packet (TCP, UDP, ICMP or a protocol number in hex).
Flags
(TCP flags)
URG
Urgent bit set.
ACK
Acknowledgement bit set.
RST
Reset bit set.
SYN
Synchronize bit set.
FIN
Finish bit set.
HEX
If an IP protocol does not have a supported decode, the first 32 bytes following the IP header are printed in a hex dump.
Log entries for non-IP packets include the Ethernet frame information and a hex dump of the first 40 bytes of the frame after the Ethernet header.
Total Log Instances (Allowed)
Specifies the maximum allowed instances of filter logs allowed on the system.
Total Log Instances (In Use)
Specifies the instances of filter logs presently existing on the system.
Total Log Bindings
Specifies the count of the filter log bindings presently existing on the system.
Type
The type of service of the service ID.
Filter ID
Uniquely identifies an IP filter as configured on the system.
Entry ID
The identifier which uniquely identifies an entry in a filter table.
Log
Specifies an entry in the filter log table.
Instantiated
Specifies if the filter log for this filter entry has or has not been instantiated.
If the packet being logged does not have a source or destination MAC address (i.e., POS) then the MAC information output line is omitted from the log entry.
In case log summary is active, the filter log mini-tables contain the following information..
 
Label
Description  
Summary Log LogID
Displays the log ID.
Crit1
Summary criterion that is used as index into the mini-tables of the log.
TotCnt
The total count of logs.
ArpCnt
Displays the total number of ARP messages logged for this log ID.
Src...
Dst...
The address type indication of the key in the mini-table.
count
The number of messages logged with the specified source/destination address.
address
The address for which count messages where received.
Sample Filter Log Output
2007/04/13 16:23:09  Filter: 100:100  Desc: Entry-100                  
Interface: to-ser1  Action: Forward                                    
Src MAC: 04-5b-01-01-00-02  Dst MAC: 04-5d-01-01-00-02  EtherType: 0800
Src IP: 10.10.0.1:646  Dst IP: 10.10.0.4:49509  Flags:   TOS: c0       
Protocol: TCP  Flags: ACK                                              
                                                                       
2007/04/13 16:23:10  Filter: 100:100  Desc: Entry-100                  
Interface: to-ser1  Action: Forward                                    
Src MAC: 04-5b-01-01-00-02  Dst MAC: 04-5d-01-01-00-02  EtherType: 0800
Src IP: 10.10.0.1:646  Dst IP: 10.10.0.3:646  Flags:   TOS: c0         
Protocol: UDP                                                          
 
2007/04/13 16:23:12  Filter: 100:100  Desc: Entry-100                  
Interface: to-ser1  Action: Forward                                    
Src MAC: 04-5b-01-01-00-02  Dst MAC: 01-00-5e-00-00-05  EtherType: 0800
Src IP: 10.10.13.1  Dst IP: 224.0.0.5  Flags:   TOS: c0                
Protocol: 89                                                           
Hex: 02 01 00 30 0a 0a 00 01 00 00 00 00 ba 90 00 00                   
     00 00 00 00 00 00 00 00 ff ff ff 00 00 03 02 01                   
 
A:ALA-A>config# show filter log bindings
===============================================================================
Filter Log Bindings
===============================================================================
Total Log Instances (Allowed)          : 2046
Total Log Instances (In Use)           : 0
Total Log Bindings                     : 0
-------------------------------------------------------------------------------
Type  FilterId EntryId   Log    Instantiated
-------------------------------------------------------------------------------
No Instances found
===============================================================================
A:ALA-A>config#
 
Note: A summary log will be printed only in case TotCnt is different from 0. Only the address types with at least 1 entry in the minitable will be printed. 
A:ALA-A>config# show filter log 190
===============================================================================
Summary Log[190] Crit1: SrcAddr TotCnt:       723 ArpCnt:     83
 Mac          8  06-06-06-06-06-06
 Mac          8  06-06-06-06-06-05
 Mac          8  06-06-06-06-06-04
 Mac          8  06-06-06-06-06-03
 Mac          8  06-06-06-06-06-02
  Ip         16  6.6.6.1
  Ip         16  6.6.6.2
  Ip         16  6.6.6.3
  Ip         16  6.6.6.4
  Ip          8  6.6.6.5
Ipv6          8  3FE:1616:1616:1616:1616:1616::
Ipv6          8  3FE:1616:1616:1616:1616:1616:FFFF:FFFF
Ipv6          8  3FE:1616:1616:1616:1616:1616:FFFF:FFFE
Ipv6          8  3FE:1616:1616:1616:1616:1616:FFFF:FFFD
Ipv6          8  3FE:1616:1616:1616:1616:1616:FFFF:FFFC 
===============================================================================
A:ALA-A
mac
Syntax
 
mac [mac-filter-id [associations | counters] [entry entry-id]]
Context
 
show>filter
Description
 
This command displays MAC filter information.
Parameters
 
mac-filter-id
Displays detailed information for the specified filter ID and its filter entries.
Values
1— 65535
associations
Appends information as to where the filter policy ID is applied to the detailed filter policy ID output.
counters
Displays counter information for the specified filter ID.
entry entry-id
Displays information on the specified filter entry ID for the specified filter ID only.
Values
1 — 65535
Output
 
No Parameters Specified
When no parameters are specified, a brief listing of IP filters is produced. The following table describes the command output for the command.
Filter ID Specified
Label
Description  
Filter Id
The IP filter ID
Scope
Template
The filter policy is of type Template.
Exclusiv
The filter policy is of type Exclusive.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Description
The MAC filter policy description.
When the filter ID is specified, detailed filter information for the filter ID and its entries is produced. The following table describes the command output for the command.
Label
Description  
MAC Filter
Filter Id
The MAC filter policy ID.
Scope
Template
The filter policy is of type Template.
Exclusiv
The filter policy is of type Exclusive.
Description
The IP filter policy description.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Filter Match
Criteria
MAC
Indicates the filter is an MAC filter policy.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
Description
The filter entry description.
FrameType
Ethernet
The entry ID match frame type is Ethernet IEEE 802.3.
Ethernet II
The entry ID match frame type is Ethernet Type II.
 
Src MAC
The source MAC address and mask match criterion. When both the MAC address and mask are all zeroes, no criterion specified for the filter entry.
Dest MAC
The destination MAC address and mask match criterion. When both the MAC address and mask are all zeroes, no criterion specified for the filter entry.
Dot1p
The IEEE 802.1p value for the match criteria. Undefined indicates no value is specified.
Ethertype
The Ethertype value match criterion.
DSAP
The DSAP value match criterion.
Undefined indicates no value specified.
SSAP
SSAP value match criterion. Undefined indicates no value specified.
Snap-pid
The Ethernet SNAP PID value match criterion. Undefined indicates no value specified.
Esnap-oui-zero
Non-Zero
Filter entry matches a non-zero value for the Ethernet SNAP OUI.
Zero
Filter entry matches a zero value for the Ethernet SNAP OUI.
Undefined
No Ethernet SNAP OUI value specified.
Match action
Default
The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified.
Drop
Packets matching the filter entry criteria will be dropped.
Forward
Packets matching the filter entry criteria is forwarded.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
Sample Detailed Output
===============================================================================
Mac Filter : 200
===============================================================================
Filter Id 			: 200 							Applied 			: No
Scope 			: Exclusive 							D. Action 			: Drop
Description : Forward SERVER sourced packets
-------------------------------------------------------------------------------
Filter Match Criteria : Mac
-------------------------------------------------------------------------------
Entry 			: 200							FrameType 			: 802.2SNAP
Description 			: Not Available
Src Mac 			: 00:00:5a:00:00:00 ff:ff:ff:00:00:00
Dest Mac 			: 00:00:00:00:00:00 00:00:00:00:00:00
Dot1p 			: Undefined 							Ethertype 			: 802.2SNAP
DSAP 			: Undefined							SSAP 			: Undefined
Snap-pid 			: Undefined 							ESnap-oui-zero : Undefined
Match action			: Forward
Ing. Matches			: 0							Egr. Matches 			: 0
Entry 			: 300 (Inactive) 							FrameType 			: Ethernet
Description 			: Not Available
Src Mac 			: 00:00:00:00:00:00 00:00:00:00:00:00
Dest Mac 			: 00:00:00:00:00:00 00:00:00:00:00:00
Dot1p 			: Undefined 							Ethertype 			: Ethernet
DSAP 			: Undefined 							SSAP 			: Undefined
Snap-pid 			: Undefined 							ESnap-oui-zero : Undefined
Match action			: Default
Ing. Matches			: 0 							Egr. Matches 			: 0
===============================================================================
 
Filter Associations
The associations for a filter ID will be displayed if the associations keyword is specified. The assocation information is appended to the filter information. The following table describes the fields in the appended associations output.
Label
Description  
Filter Association
Mac
The filter associations displayed are for a MAC filter policy ID.
Service Id
The service ID on which the filter policy ID is applied.
SAP
The Service Access Point on which the filter policy ID is applied.
Type
The type of service of the Service ID.
(Ingress)
The filter policy ID is applied as an ingress filter policy on the interface.
(Egress)
The filter policy ID is applied as an egress filter policy on the interface.
Sample Output
A:ALA-49# show filter mac 3 associations
===============================================================================
Mac Filter
===============================================================================
Filter ID		: 3							Applied			: Yes
Scope		: Template							Def. Action			: Drop
Entries		: 1
-------------------------------------------------------------------------------
Filter Association : Mac
-------------------------------------------------------------------------------
Service Id	: 1001								Type			: VPLS
- SAP 	1/1/1:1001			(Egress)
===============================================================================
A:ALA-49#
 
Filter Entry Counters Output
When the counters keyword is specified, the filter entry output displays the filter matches/hit information. The following table describes the command output for the command.
Sample Output
Label
Description  
Mac Filter
Filter Id
The MAC filter policy ID.
Scope
Template
The filter policy is of type Template.
Exclusive
The filter policy is of type Exclusive.
Description
The MAC filter policy description.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Filter Match
Criteria
Mac
Indicates the filter is an MAC filter policy.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
FrameType
Ethernet
The entry ID match frame type is Ethernet IEEE 802.3.
802.2LLC
The entry ID match frame type is Ethernet IEEE 802.2 LLC.
802.2SNAP
The entry ID match frame type is Ethernet IEEE 802.2 SNAP.
Ethernet II
The entry ID match frame type is Ethernet Type II.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
 
A:ALA-49# show filter mac 8 counters
===============================================================================
Mac Filter
===============================================================================
Filter Id   : 8                                Applied         : Yes
Scope       : Template                         Def. Action     : Forward
Entries     : 2
Description : Description for Mac Filter Policy id # 8
-------------------------------------------------------------------------------
Filter Match Criteria : Mac
-------------------------------------------------------------------------------
Entry       : 8                                FrameType       : Ethernet
Ing. Matches: 80 pkts (5440 bytes)
Egr. Matches: 62 pkts (3968 bytes)
  
Entry       : 10                               FrameType       : Ethernet
Ing. Matches: 80 pkts (5440 bytes)
Egr. Matches: 80 pkts (5120 bytes)
li-mac
Syntax
 
li-mac [li-mac-filter-id [associations | counters] [entry entry-id]]
Context
 
show>filter
Description
 
This command displays Lawful Intercept MAC filter information.
Parameters
 
li-mac-filter-id
Displays detailed information for the specified Lawful Intercept filter ID and its filter entries.
Values
1— 65535
associations
Appends information as to where the Lawful Intercept filter policy ID is applied to the detailed filter policy ID output.
counters
Displays counter information for the specified Lawful Intercept filter ID.
entry entry-id
Displays information on the specified Lawful Intercept filter entry ID for the specified filter ID only.
Values
1 — 65535
Output
 
No Parameters Specified
When no parameters are specified, a brief listing of IP filters is produced. The following table describes the command output for the command.
Filter ID Specified
Label
Description  
Filter Id
The IP filter ID
Scope
Template
The filter policy is of type Template.
Exclusiv
The filter policy is of type Exclusive.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Description
The MAC filter policy description.
When the filter ID is specified, detailed filter information for the filter ID and its entries is produced. The following table describes the command output for the command.
Label
Description  
MAC Filter
Filter Id
The MAC filter policy ID.
Scope
Template
The filter policy is of type Template.
Exclusiv
The filter policy is of type Exclusive.
Description
The IP filter policy description.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Filter Match
Criteria
MAC
Indicates the filter is an MAC filter policy.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
Description
The filter entry description.
FrameType
Ethernet
The entry ID match frame type is Ethernet IEEE 802.3.
Ethernet II
The entry ID match frame type is Ethernet Type II.
 
Src MAC
The source MAC address and mask match criterion. When both the MAC address and mask are all zeroes, no criterion specified for the filter entry.
Dest MAC
The destination MAC address and mask match criterion. When both the MAC address and mask are all zeroes, no criterion specified for the filter entry.
Dot1p
The IEEE 802.1p value for the match criteria. Undefined indicates no value is specified.
Ethertype
The Ethertype value match criterion.
DSAP
The DSAP value match criterion.
Undefined indicates no value specified.
SSAP
SSAP value match criterion. Undefined indicates no value specified.
Snap-pid
The Ethernet SNAP PID value match criterion. Undefined indicates no value specified.
Esnap-oui-zero
Non-Zero
Filter entry matches a non-zero value for the Ethernet SNAP OUI.
Zero
Filter entry matches a zero value for the Ethernet SNAP OUI.
Undefined
No Ethernet SNAP OUI value specified.
Match action
Default
The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified.
Drop
Packets matching the filter entry criteria will be dropped.
Forward
Packets matching the filter entry criteria is forwarded.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
Sample Detailed Output
# show li filter li-mac "testLiMacFilter"
 
===============================================================================
LI Mac Filter
===============================================================================
Filter Id   : testLiMacFilter                  Associated      : Yes
Entries     : 4
Description : test LI Mac filter setup
-------------------------------------------------------------------------------
Filter Match Criteria : Mac
-------------------------------------------------------------------------------
Entry       : 10                               FrameType       : Ethernet
Description : entry 10
Src Mac     : 01:02:03:04:05:06 ff:ff:ff:ff:ff:ff
Dest Mac    :
LI Source   : Yes
Ing. Matches: 0 pkts
Egr. Matches: 0 pkts
 
Entry       : 20                               FrameType       : Ethernet
Description : entry 20
Src Mac     :
Dest Mac    : 01:02:03:04:05:06 ff:ff:ff:ff:ff:ff
LI Source   : Yes
Ing. Matches: 0 pkts
Egr. Matches: 0 pkts
 
Entry       : 30                               FrameType       : Ethernet
Description : test 30
Src Mac     :
Dest Mac    :
LI Source   : Yes
Ing. Matches: 0 pkts
Egr. Matches: 0 pkts
 
Entry       : 50                               FrameType       : Ethernet
Description : entry 50
Src Mac     : 00:00:01:66:00:00 00:00:0f:ff:00:00
Dest Mac    :
LI Source   : No
Ing. Matches: 0 pkts
Egr. Matches: 0 pkts
 
Filter Associations
The associations for a filter ID will be displayed if the associations keyword is specified. The assocation information is appended to the filter information. The following table describes the fields in the appended associations output.
Label
Description  
Filter Association
Mac
The filter associations displayed are for a MAC filter policy ID.
Service Id
The service ID on which the filter policy ID is applied.
SAP
The Service Access Point on which the filter policy ID is applied.
Type
The type of service of the Service ID.
(Ingress)
The filter policy ID is applied as an ingress filter policy on the interface.
(Egress)
The filter policy ID is applied as an egress filter policy on the interface.
Sample Output
# show li filter li-mac "testLiMacFilter" association
 
===============================================================================
LI Mac Filter
===============================================================================
Filter Id   : testLiMacFilter                  Associated      : Yes
Entries     : 4
Description : test LI Mac filter setup
-------------------------------------------------------------------------------
Filter Association : Mac
-------------------------------------------------------------------------------
mac filter 1
  Service Id  : 60                             Type            : VPLS
    - SAP    1/1/6:7  (Ingress)
    - SAP    1/1/6:9  (Egress)
 
Filter Entry Counters Output
When the counters keyword is specified, the filter entry output displays the filter matches/hit information. The following table describes the command output for the command.
Sample Output
Label
Description  
Mac Filter
Filter Id
The MAC filter policy ID.
Scope
Template
The filter policy is of type Template.
Exclusive
The filter policy is of type Exclusive.
Description
The MAC filter policy description.
Applied
No
The filter policy ID has not been applied.
Yes
The filter policy ID is applied.
Def. Action
Forward
The default action for the filter ID for packets that do not match the filter entries is to forward.
Drop
The default action for the filter ID for packets that do not match the filter entries is to drop.
Filter Match
Criteria
Mac
Indicates the filter is an MAC filter policy.
Entry
The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified.
FrameType
Ethernet
The entry ID match frame type is Ethernet IEEE 802.3.
802.2LLC
The entry ID match frame type is Ethernet IEEE 802.2 LLC.
802.2SNAP
The entry ID match frame type is Ethernet IEEE 802.2 SNAP.
Ethernet II
The entry ID match frame type is Ethernet Type II.
Ing. Matches
The number of ingress filter matches/hits for the filter entry.
Egr. Matches
The number of egress filter matches/hits for the filter entry.
 
# show li filter li-mac "testLiMacFilter" counters
 
===============================================================================
LI Mac Filter
===============================================================================
Filter Id   : testLiMacFilter                  Associated      : Yes
Entries     : 4
Description : test LI Mac filter setup
-------------------------------------------------------------------------------
Filter Match Criteria : Mac
-------------------------------------------------------------------------------
Entry       : 10
Description : entry 10
Ing. Matches: 0 pkts
Egr. Matches: 0 pkts
 
Entry       : 20
Description : entry 20
Ing. Matches: 0 pkts
Egr. Matches: 0 pkts
 
Entry       : 30
Description : test 30
Ing. Matches: 0 pkts
Egr. Matches: 0 pkts
 
Entry       : 50 
Description : entry 50
Ing. Matches: 0 pkts
Egr. Matches: 0 pkts
redirect-policy
Syntax
 
redirect-policy {redirect-policy-name [dest ip-address] [association]}
Context
 
show>filter
Description
 
This command shows redirect filter information.
Parameters
 
redirect-policy-name
Displays information for the specified redirect policy.
dest ip-address
Directs the router to use a specified IP address for communication.
association
Appends association information.
Output
 
Redirect Policy Output
The following table describes the fields in the redirect policy command output.
Label
Description  
Redirect Policy
Specifies a specific redirect policy.
Applied
Specifies whether the redirect policy is applied to a filter policy entry.
Description
Displays the user-provided description for this redirect policy.
Active Destination
ip address
Specifies the IP address of the active destination.
none
Indicates that there is currently no active destination.
 
Destination
Specifies the destination IP address.
Oper Priority
Specifies the operational value of the priority for this destination. The highest operational priority across multiple destinations is used as the preferred destination.
Admin Priority
Specifies the configured base priority for the destination.
Admin State
Specifies the configured state of the destination.
 
Out of Service
Tests for this destination will not be conducted.
Oper State
Specifies the operational state of the destination.
Ping Test
Specifies the name of the ping test.
Timeout
Specifies the amount of time in seconds that is allowed for receiving a response from the far-end host. If a reply is not received within this time the far-end host is considered unresponsive.
Interval
Specifies the amount of time in seconds between consecutive requests sent to the far end host.
Drop Count
Specifies the number of consecutive requests that must fail for the destination to declared unreachable.
Hold Down
Specifies the amount of time in seconds that the system should be held down if any of the test has marked it unreachable.
Hold Remain
Specifies the amount of time in seconds that the system will remain in a hold down state before being used again.
Last Action at
Displays a time stamp of when this test received a response for a probe that was sent out.
SNMP Test
Specifies the name of the SNMP test.
URL Test
Specifies the name of the URL test.
Sample Output 
A:ALA-A>config>filter# show filter redirect-policy
===============================================================================
Redirect Policies
===============================================================================
Redirect Policy                  Applied Description
-------------------------------------------------------------------------------
wccp                             Yes
redirect1                        Yes     New redirect info
redirect2                        Yes     Test test test test
===============================================================================
ALA-A>config>filter#
               
 
ALA-A>config>filter# show filter redirect-policy redirect1
===============================================================================
Redirect Policy
===============================================================================
Redirect Policy: redirect1                        Applied      : Yes
Description    : New redirect info
Active Dest    : 10.10.10.104
-------------------------------------------------------------------------------
Destination    : 10.10.10.104
-------------------------------------------------------------------------------
Description    : SNMP_to_104
Admin Priority : 105                              Oper Priority: 105
Admin State    : Up                               Oper State   : Up
 
SNMP Test      : SNMP-1
Interval       : 30                               Timeout      : 1
Drop Count     : 30
Hold Down      : 120                              Hold Remain  : 0
Last Action at : None Taken
-------------------------------------------------------------------------------
Destination    : 10.10.10.105
-------------------------------------------------------------------------------
Description    : another test
Admin Priority : 95                               Oper Priority: 105
Admin State    : Up                               Oper State   : Down
 
Ping Test
Interval       : 1                                Timeout      : 30
Drop Count     : 5
Hold Down      : 0                                Hold Remain  : 0
Last Action at : 03/19/2007 00:46:55              Action Taken : Disable
-------------------------------------------------------------------------------
Destination    : 10.10.10.106
-------------------------------------------------------------------------------
Description    : (Not Specified)
Admin Priority : 90                               Oper Priority: 90
Admin State    : Up                               Oper State   : Down
 
URL Test       : URL_to_Proxy
Interval       : 10                               Timeout      : 10
Drop Count     : 3
Hold Down      : 0                                Hold Remain  : 0
Last Action at : 03/19/2007 05:04:15              Action Taken : Disable
Priority Change: 0                                Return Code  : 0
===============================================================================
A:ALA-A>config>filter#
 
 
A:ALA-A>show filter redirect-policy redirect1 dest 10.10.10.106
===============================================================================
Redirect Policy
===============================================================================
Redirect Policy: redirect1                        Applied      : Yes
Description    : New redirect info
Active Dest    : 10.10.10.104
-------------------------------------------------------------------------------
Destination    : 10.10.10.106
-------------------------------------------------------------------------------
Description    : (Not Specified)
Admin Priority : 90                               Oper Priority: 90
Admin State    : Up                               Oper State   : Down
 
URL Test       : URL_to_Proxy
Interval       : 10                               Timeout      : 10
Drop Count     : 3
Hold Down      : 0                                Hold Remain  : 0
Last Action at : 03/19/2007 05:04:15              Action Taken : Disable
Priority Change: 0                                Return Code  : 0
===============================================================================
ALA-A#
system-filter
Syntax
 
system-filter [chained-to]
Context
 
show>filter
Description
 
This command shows system filter information.
Parameters
 
chained-to
This option displays filters that chain to a given system filter.
Output
 
No Parameters Specified
When no parameters are specified, the following information is displayed (grouped for IP and IPv6): active system filter and all filters with scope system.
Sample Output 
*A:Dut-C>show>filter# system-filter
 
===============================================================================
IP system filters
===============================================================================
Filter-Id                     Active
-------------------------------------------------------------------------------
100                           Yes
65535                         No
-------------------------------------------------------------------------------
No. of IP system filters (total / active): 2 / 1
===============================================================================
 
===============================================================================
IPv6 system filters
===============================================================================
Filter-Id                     Active
-------------------------------------------------------------------------------
No Matching Entries
-------------------------------------------------------------------------------
No. of IPv6 system filters (total / active): 0 / 0
===============================================================================
 
*A:Dut-C>show>filter# system-filter chained-to
 
============================================================================
IP filters that chain to the active IP system filter
============================================================================
3                  4                  5                  6
5:23               6:24
----------------------------------------------------------------------------
No. of IP filters that chain to the active IP system filter: 6
============================================================================
 
============================================================================
IPv6 filters that chain to the active IPv6 system filter
============================================================================
No Matching Entries
----------------------------------------------------------------------------
No. of IPv6 filters that chain to the active IPv6 system filter: 0
============================================================================
 
match-list
Syntax
 
match-list
Context
 
show>filter
Description
 
This command displays information for match lists used in filter policies (IOM and CPM).
 
ip-prefix-list
Syntax
 
ip-prefix-list [prefix-list-name]
ip-prefix-list prefix-list-name references
Context
 
show>filter>match-list
Description
 
This command displays IPv4 prefixes information for match criteria in IPv4 ACL and CPM filter policies.
Parameters
 
ip-prefix-list-name
A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
ipv6-prefix-list
Syntax
 
ipv6-prefix-list [prefix-list-name]
ipv6-prefix-list prefix-list-name references
Context
 
show>filter>match-list
Description
 
This command displays IPv6 prefixes information for match criteria in IPv6 ACL and CPM filter policies.
Parameters
 
ip-prefix-list-name
A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
port-list
Syntax
 
port-list [port-list-name]
port-list port-list-name references
Context
 
show>filter>match-list
Description
 
This command displays TCP/UDP/SCTP port values or ranges for match criteria in IPv4 and IPv6 ACL and CPM filter policies.
Parameters
 
port-list-name
A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
 
Clear Commands
ip
Syntax
 
ip ip-filter-id [entry entry-id] [ingress | egress]
Context
 
clear>filter
Description
 
Clears the counters associated with the IP filter policy.
By default, all counters associated with the filter policy entries are reset. The scope of which counters are cleared can be narrowed using the command line parameters.
Default
 
clears all counters associated with the IP filter policy entries.
Parameters
 
ip-filter-id
The IP filter policy ID.
Values
1 — 65535
entry-id
Specifies that only the counters associated with the specified filter policy entry will be cleared.
Values
1 — 65535
ingress
Specifies to only clear the ingress counters.
egress
Specifies to only clear the egress counters.
ipv6
Syntax
 
ipv6 ip-filter-id [entry entry-id] [ingress | egress]
Context
 
clear>filter
Description
 
Clears the counters associated with the IPv6 filter policy.
By default, all counters associated with the filter policy entries are reset. The scope of which counters are cleared can be narrowed using the command line parameters.
Default
 
Clears all counters associated with the IPv6 filter policy entries.
Parameters
 
ip-filter-id
The IP filter policy ID.
Values
1 — 65535
entry-id
Specifies that only the counters associated with the specified filter policy entry will be cleared.
Values
1 — 65535
ingress
Specifies to only clear the ingress counters.
egress
Specifies to only clear the egress counters.
log
Syntax
 
log log-id
Context
 
clear
Description
 
Clears the contents of a memory or file based filter log.
This command has no effect on a syslog based filter log.
Parameters
 
log-id
The filter log ID destination expressed as a decimal integer.
Values
101 — 199
mac
Syntax
 
mac mac-filter-id [entry entry-id] [ingress | egress]
Context
 
clear>filter
Clears the counters associated with the MAC filter policy.
By default, all counters associated with the filter policy entries are reset. The scope of which counters are cleared can be narrowed using the command line parameters.
Default
 
Clears all counters associated with the MAC filter policy entries
Parameters
 
mac-filter-id
The MAC filter policy ID.
Values
1 — 65535
entry-id
Specifies that only the counters associated with the specified filter policy entry will be cleared.
Values
1 — 65535
ingress
Specifies to only clear the ingress counters.
egress
Specifies to only clear the egress counters.
 
Monitor Commands
filter
Syntax
 
filter ip ip-filter-id entry entry-id [interval seconds] [repeat repeat] [absolute | rate]
Context
 
monitor
Description
 
This command monitors the counters associated with the IP filter policy.
Parameters
 
ip-filter-id
The IP filter policy ID.
Values
1 — 65535
entry-id
Specifies that only the counters associated with the specified filter policy entry will be monitored.
Values
1 — 65535
interval
Configures the interval for each display in seconds.
Default
10 seconds
Values 3 — 60
repeat repeat
Configures how many times the command is repeated.
Default
10
Values 1 — 999
absolute
When the absolute keyword is specified, the raw statistics are displayed, without processing. No calculations are performed on the delta or rate statistics.
rate
When the rate keyword is specified, the rate-per-second for each statistic is displayed instead of the delta.
filter
Syntax
 
filter ipv6 ipv6-filter-id entry entry-id [interval seconds] [repeat repeat] [absolute | rate]
Context
 
monitor
Description
 
This command monitors the counters associated with the IPv6 filter policy.
Parameters
 
ipv6-filter-id
The IP filter policy ID.
Values
1 — 65535
entry-id
Specifies that only the counters associated with the specified filter policy entry will be moniitored.
Values
1 — 65535
interval
Configures the interval for each display in seconds.
Default
5 seconds
Values 3 — 60
repeat repeat
Configures how many times the command is repeated.
Default
10
Values 1 — 999
absolute
When the absolute keyword is specified, the raw statistics are displayed, without processing. No calculations are performed on the delta or rate statistics.
rate
When the rate keyword is specified, the rate-per-second for each statistic is displayed instead of the delta.
filter
Syntax
 
filter mac mac-filter-id entry entry-id [interval seconds] [repeat repeat] [absolute | rate]
Context
 
monitor
Description
 
This command monitors the counters associated with the MAC filter policy.
Parameters
 
mac-filter-id
The MAC filter policy ID.
Values
1 — 65535
entry-id
Specifies that only the counters associated with the specified filter policy entry will be cleared.
Values
1 — 65535
interval
Configures the interval for each display in seconds.
Default
5 seconds
Values 3 — 60
repeat repeat
Configures how many times the command is repeated.
Default
10
Values 1 — 999
absolute
When the absolute keyword is specified, the raw statistics are displayed, without processing. No calculations are performed on the delta or rate statistics.
rate
When the rate keyword is specified, the rate-per-second for each statistic is displayed instead of the delta.
Debug Commands
cpm
Syntax
 
cpm
Context
 
tools>dump>filter>resources
Description
 
This command displays information about filter resource utilization on the CPM, consumption by filter-using services like TMS, Flowspec, OpenFlow, and the filters that use the most resources.
Sample Output 
*A:Dut-C>tools>dump>filter>resources># cpm
 
===========================================================================
Number of ACL filters defined on CPM
===========================================================================
Owner                     MAC             IP           IPv6          Total
---------------------------------------------------------------------------
Configuration               0              7              0              7
BGP FlowSpec                0              2              2              4
Host Common                 0              2              0              2
Tms                         0              1              1              2
Openflow                    0              2              1              3
---------------------------------------------------------------------------
Total                       0             14              4             18
===========================================================================
Available filters (except openflow): 16369
Available openflow filters:          16381
 
=============================================================================
Number of ACL filter entries / subentries defined on CPM
=============================================================================
Inserted by                             MAC       IP     IPv6          Total
-----------------------------------------------------------------------------
User configuration                        0       21        1             22
                                          0       21        1             22
Radius                                    0        0        0              0
                                          0        0        0              0
Credit Control                            0        0        0              0
                                          0        0        0              0
BGP FlowSpec                              0        0        0              0
                                          0        0        0              0
Embedded                                  0        0        0              0
                                          0        0        0              0
Radius shared host                        0        2        0              2
                                          0        2        0              2
Openflow                                  0        0        0              0
                                          0        0        0              0
PCC-Rule                                  0        0        0              0
                                          0        0        0              0
Other                                     0        0        0              0
                                          0        0        0              0
-----------------------------------------------------------------------------
Total                                     0       23        1             24
                                          0       23        1             24
=============================================================================
Available subentries (except openflow): 262120
Available openflow subentries:          262144
 
===============================================================================
Filters utilizing most resources (ordered by CPM entries)
===============================================================================
Type Id                                  Entries     Subentries   TCAM entries
                                                                (per FlexPath)
-------------------------------------------------------------------------------
No Mac filters found
-------------------------------------------------------------------------------
Ip   100                                       5              5              5
Ip   65535                                     5              5              5
Ip   1                                         4              4              4
Ip   5:23                                      2              2              2
Ip   6:24                                      2              2              2
-------------------------------------------------------------------------------
Ipv6 _tmnx_tms-ing-5/1-F                       1              1              1
Ipv6 fSpec-0                                   0              0              0
Ipv6 fSpec-2345                                0              0              0
Ipv6 _tmnx_ofs_system:1                        0              0              0
No more Ipv6 filters
===============================================================================
 
===============================================================================
Filters utilizing most resources (ordered by CPM subentries)
===============================================================================
Type Id                                  Entries     Subentries   TCAM entries
                                                                (per FlexPath)
-------------------------------------------------------------------------------
No Mac filters found
-------------------------------------------------------------------------------
Ip   100                                       5              5              5
Ip   65535                                     5              5              5
Ip   1                                         4              4              4
Ip   5:23                                      2              2              2
Ip   6:24                                      2              2              2
-------------------------------------------------------------------------------
Ipv6 _tmnx_tms-ing-5/1-F                       1              1              1
Ipv6 fSpec-0                                   0              0              0
Ipv6 fSpec-2345                                0              0              0
Ipv6 _tmnx_ofs_system:1                        0              0              0
No more Ipv6 filters
===============================================================================
 
egress-pbr
Syntax
 
egress-pbr [detail]
Context
 
tools>dump>filter>resources
Description
 
This command displays the number of allocated unique egress PBR destinations.
Parameters
 
detail
Displays number of allocated unique egress PBR destinations together with a list of destinations and their ref counts.
Sample Output 
*A:Dut-C>tools dump filter resources egress-pbr
 
===============================
Egress PBR destinations
===============================
Name                     Count
-------------------------------
All destinations             8
Unique destinations          4
===============================
 
 
*A:Dut-C# tools dump filter resources egress-pbr detail
 
===============================================================================
Unique egress PBR destinations
===============================================================================
Num Action       Ref. count Parameters
-------------------------------------------------------------------------------
  1 Esi L3       1          esi  00:00:00:00:00:00:00:00:00:01
                            ip   5.5.1.5
                            if   VasToFromAccess
                            rtr  123
-------------------------------------------------------------------------------
  2 Esi L3       2          esi  00:00:00:00:00:00:00:00:00:02
                            ip   5.5.0.5
                            if   VasToFromNetwork
                            rtr  123
-------------------------------------------------------------------------------
  3 Red-pol      3          name egress-pbr
-------------------------------------------------------------------------------
  4 Red-pol      2          name ingress-pbr
===============================================================================
 
iom
Syntax
 
iom [<slot-number>]
Context
 
tools>dump>filter>resources
Description
 
This command shows information about filter resource utilization on all IOMs or a specified IOM. Resource utilization per filter type is available, as well as filters using most resources on a given line card.
Parameters
 
slot-number
specifies that only the filter resource utilization associated with the IOM card in this slot will be displayed
Values
1 — 10
Sample Output 
*A:Dut-C>tools>dump>filter>resources># iom
 
=======================================================
Number of ACL filter entries used / available on IOMs
=======================================================
Slot                          Used           Available
-------------------------------------------------------
1                               11               65524
2                                5               65530
3                                5               65530
=======================================================
 
===========================================================================
Number of ACL filters and filter entries used / available on FlexPaths
===========================================================================
Slot FlexPath    Dir  Filters  Filters   MAC/IP   MAC/IP     IPv6     IPv6
                         used    avail  entries  entries  entries  entries
                                           used    avail     used    avail
---------------------------------------------------------------------------
1    1          Ingr        2     2045       10    65526        2    28670
                 Egr        2     2045        5    32763        2    16382
2    1          Ingr        4     2043        7    65529        2    28670
                 Egr        0     2047        2    32766        2    16382
3    1          Ingr        0     2047        7    65529        2    28670
                 Egr        0     2047        2    32766        2    16382
===========================================================================
 
===============================================================================
Filters utilizing most resources (ordered by TCAM entries per FlexPath)
Only filters present on any IOM are displayed
===============================================================================
Type Id                                  Entries     Subentries   TCAM entries
                                                                (per FlexPath)
-------------------------------------------------------------------------------
No Mac filters found
-------------------------------------------------------------------------------
Ip   100                                       5              5              5
Ip   5:23                                      2              2              2
Ip   6:24                                      2              2              2
Ip   3                                         1              1              1
Ip   4                                         1              1              1
-------------------------------------------------------------------------------
Ipv6 _tmnx_tms-ing-5/1-F                       1              1              1
Ipv6 fSpec-0                                   0              0              0
Ipv6 fSpec-2345                                0              0              0
No more Ipv6 filters
===============================================================================
 
ip
Syntax
 
ip <filter-id>
Context
 
tools>dump>filter>resources
Description
 
This command displays information about the specified IP filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
Parameters
 
filter-id
specifies that only the filter resource utilization associated with this IP filter will be displayed.
Values
1 — 65535
Sample Output 
*A:Dut-C>tools>dump>filter>resources># ip 100
 
===============================================================================
Resource utilization details for Ip filter 100
===============================================================================
CPM entries used                       : 5
CPM subentries used                    : 5
TCAM entries used (per FlexPath)       : 5
Associated with IOMs                   : 1,2,3,4,5,6,7,8,9,10
 
---------------------------------------------------------------------------
Largest 5 entries
---------------------------------------------------------------------------
Entry ID                                        Active        TCAM entries
                                                            (per FlexPath)
---------------------------------------------------------------------------
3                                                  Yes                   1
4                                                  Yes                   1
5                                                  Yes                   1
6                                                  Yes                   1
100                                                Yes                   1
---------------------------------------------------------------------------
===============================================================================
 
ipv6
Syntax
 
ipv6 <filter-id>
Context
 
tools>dump>filter>resources
Description
 
This command displays information about the specified IPv6 filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
Parameters
 
filter-id
specifies that only the filter resource utilization associated with this IPv6 filter will be displayed.
Values
1 — 65535
Sample Output 
*A:Dut-C>tools>dump>filter>resources># ipv6 "fSpec-0"
 
===============================================================================
Resource utilization details for Ipv6 filter fSpec-0
===============================================================================
CPM entries used                       : 0
CPM subentries used                    : 0
TCAM entries used (per FlexPath)       : 0
Associated with IOMs                   : 2
 
---------------------------------------------------------------------------
Largest 5 entries
---------------------------------------------------------------------------
Entry ID                                        Active        TCAM entries
                                                            (per FlexPath)
---------------------------------------------------------------------------
No Matching Entries
---------------------------------------------------------------------------
===============================================================================
 
mac
Syntax
 
mac <filter-id>
Context
 
tools>dump>filter>resources
Description
 
This command displays information about the specified MAC filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
Parameters
 
filter-id
specifies that only the filter resource utilization associated with this IPv6 filter will be displayed.
Values
1 — 65535
Sample Output 
*A:Dut-C>tools>dump>filter>resources># mac 1
 
===============================================================================
Resource utilization details for Mac filter 1
===============================================================================
CPM entries used                       : 1
CPM subentries used                    : 1
TCAM entries used (per FlexPath)       : 1
Associated with IOMs                   : 1
 
---------------------------------------------------------------------------
Largest 5 entries
---------------------------------------------------------------------------
Entry ID                                        Active        TCAM entries
                                                            (per FlexPath)
---------------------------------------------------------------------------
1                                                  Yes                   1
No more entries defined
---------------------------------------------------------------------------
===============================================================================
activate-best-dest
Syntax
 
activate-best-dest
Context
 
tools>perform>filter>redirect-policy
Description
 
This command allows the operator to force a PBR switch to the best destination selected by the redirect policy when that destination is not currently active as result of sticky destination functionality being enabled for the specified redirect policy. If hold-time-up is running, the timer is also expired.