Mypower
S4100
Troubleshooting
Maipu Confidential & Proprietary Information
Page
45
of
124
ACL Troubleshooting
Main contents:
z
Basic idea of ACL troubleshooting
z
Common ACL troubleshooting
Basic Idea of ACL
Troubleshooting
1.
View whether the configured ACL rules are correct.
Checking method: Use the show access-list command to view whether
the configured ACL rules are correct.
2.
View whether the ACL application is correct.
Checking method: Use the show acl-object command to view whether
the ACL is correctly applied on the appropriate object (global, VLAN and
port).
Common ACL Troubleshooting
Fault 1: The configured ACL does not take effect. The packet filtering
function becomes invalid.
Possible Reasons
Judging Methods and Solutions
The ACL is not configured
with ACE rules and is an
empty ACL.
Use the show access command to view whether the ACLA is
configured with rules. If not, add the corresponding ACE rules.
For example, the following ACL is configured with one ACE
rule.
sw201#show access
mac access-list extended 3001
10 permit any any precedence 5 vlan-id 100
