Chapter 33: Access Control Lists
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
952
Match Counts
You can use the show access-list command to display the number of matches for each entry in a given access list. For IPv4,
enter:
show access-list
Standard IP access list 1
10 permit 10.10.10.0, Wildcard bits 0.0.0.255 (124 matches)
Extended IP access list 100
10 permit ip 10.20.0.0 0.0.0.255 10.30.50.0 0.0.0.255 (12 matches)
For IPv6, use the following command:
show ipv6 access-list
Note: Because of software limitations, the show access-list command returns null results for match counts for some
operations. These operations are related to configuring router distribution lists, redistribution, and SNMP community
strings. See the list below.
The various forms of the commands listed below do not update the match counts for their associated ACLs.
configure router ospf [vrf <name>] distribute-
list …
configure router ospf [vrf <name>] redistribute …
configure router rip redistribute rip
configure router rip [vrf <name>] distribute-
list …
configure router rip [vrf <name>] redistribute …
configure snmp-server community
Use the following command to clear the IPv4 access list counters:
clear access-list counters [number | name]
With the limit of 2048 data plane ACL entries and the additional memory used with using the range keyword, it is
important to manage ACL usage and avoid exceeding storage limits.