H3C SOHO IE4300, Command Reference Manual

Page: 1682 / 3296

13
display packet-filter verbose
Use
display packet-filter verbose
to display ACL application details for packet filtering.
Syntax
display packet-filter verbose interface interface-type interface-number
{ inbound | outbound } [ [ ipv6 | mac ] { acl-number | name acl-name } ] [ slot
slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number
: Specifies an interface by its type and
number. The
slot slot-number
option is not available for an Ethernet interface.
inbound : Specifies the inbound direction.
outbound
: Specifies the outbound direction.
ipv6
: Specifies the IPv6 ACL type.
mac
: Specifies the Layer 2 ACL type.
acl-number
: Specifies an ACL by its number.
•
2000 to 2999 for basic ACLs.
•
3000 to 3999 for advanced ACLs.
•
4000 to 4999 for Layer 2 ACLs.
name acl-name
: Specifies an ACL by its name. The
acl-name
argument is a case-insensitive
string of 1 to 63 characters.
slot slot-number
: Specifies an IRF member device by its member ID. If you do not specify a
member device, this command displays ACL application details for packet filtering for the master
device.
Usage guidelines
If acl-number , name acl-name , ipv6 , or mac is not specified, this command displays
application details of all ACLs for packet filtering.
To specify the IPv4 ACL type, do not specify the ipv6 or mac keyword.
Examples
# Display application details of all ACLs for inbound packet filtering on GigabitEthernet 1/0/1.
<Sysname> display packet-filter verbose interface gigabitethernet 1/0/1 inbound
Interface: GigabitEthernet1/0/1
Inbound policy:
IPv4 ACL 2001
rule 0 permit
rule 5 permit source 1.1.1.1 0 (Failed)
rule 10 permit vpn-instance test (Failed)