Inalp Networks SmartWare Release 2.10, Software Configuration Manual

Page: 170 / 357

170 Access Control List Configuration
Procedure
To debug the access control list profiles
Mode
Administrator execution or any other mode, except the operator execution
Command Purpose
Step 1 node #debug acl Enables access control list debug
monitor
Procedure
To activate the debug level of an access control list profiles for a specific interface.
Mode
Interface
Command Purpose
Step 1 node (cfg)#context ip router Selects the IP router context
Step 2 node (ctx-ip)[router]#interface if-name
Selects IP interface if-name for
which access control list profile
shall be debugged
Step 3 node (if-ip)[ if-name ]#debug acl {in | out}
[level]
Enables access control list debug
monitor with a certain debug level
for the selected interface
if-name
Where the syntax is:
Keyword Meaning
if-name The name of the IP interface to which an access control list profile gets bound
level The detail level. Level 0 disables all debug output, level 7 shows all debug output.
in Specifies that the settings for incoming packets are to be changed.
out Specifies that the settings for outgoing packets are to be changed.
Example: Debugging Access Control List Profiles
The following example shows how to enable debugging for incoming traffic of access control lists on
interface
wan . On level 7 all debug output is shown.
SN(cfg)# context ip router
SN(cfg-ip)[router]# interface wan
SN(cfg-if)[wan]# debug acl in 7
The following example enables the debug monitor for access control lists globally.
SN# debug acl
The following example disables the debug monitor for access control lists globally.
SN# no debug acl
Software Configuration Guide Release 2.10, Revision 1.00