52
Cisco 10008 Router PRE4 Installation and Configuration Guide
OL-13840-01
show pxf cpu access-lists
test
Operational 3 -
-
-
-
0Kb 3
test_list
Operational 1
12
11
0
0
7Kb 1
describes the significant fields shown in the display.
The following sample output describes the information displayed in the next section of the command
output from the
show pxf cpu access-lists security
command:
First level lookup tables:
Block Use Rows Columns Memory used
0 TOS/Protocol 1/128 1/32 16384
1 IP Source (MS) 1/128 1/32 16384
2 IP Source (LS) 1/128 1/32 16384
3 IP Dest (MS) 2/128 1/32 16384
4 IP Dest (LS) 12/128 1/32 16384
5 TCP/UDP Src Port 1/128 1/32 16384
6 TCP/UDP Dest Port 1/128 1/32 16384
Table 10, Part 1
show pxf cpu access-lists security Field Descriptions
Field Description
ACL
Identifies the ACL by name or number.
State
Displays the current state of the ACL:
•
Copying—ACL is in the process of being created or
compiled.
•
Operational—ACL is active and filtering packets.
•
Out of acl private mem—ACL has run out of the private
memory that was allocated exclusively to it.
•
Out of shared mem—ACL has run out of the memory that
it shares with other ACLs.
•
Unknown Failure—ACL has failed because of an
uncategorized reason.
•
Unneeded—ACL was allocated but is not currently in
use.
Tables
An indicator of whether the ACL has been split into more
than one PXF pass. The first three ACLs in the output are
MiniACLs, and have the ACL_index duplicated in the Tables
column.
Entries
The count of ACL rules as seen by the Turbo compiler. This
is the sum of the Config, Fragment, and Redundant columns
plus 1.
Config
The count of rules for this ACL.
Fragment
The count of extra rules added to handle fragment handling,
where Layer 4 information is needed but not available in a
packet fragment.
Redundant
The count of rules that are not needed because they are
covered by earlier rules.
Memory
The amount of PXF XCM in use for the ACL.
ACL_index
The index of the ACL in XCM.