8
Table 3
Command output
Field Description
In-Interface
Inbound interface of the packet.
ACFP rule total number
Total number of ACFP rules.
ClientID
Client ID, client list index.
Policy-Index
Policy index.
Rule-Index
Rule index.
SIP
Source IP address.
SMask
Inverse mask of source IP address.
SPort
Source port number.
DIP
Destination IP address.
DMask
Inverse mask of destination IP address.
DPort
Destination port number.
Protocol
Protocol of the packet: GRE, ICMP, IGMP, IPinIP, OSPF, TCP, UDP, IP, and so on.
Fragment
Whether the packet is a fragment:
•
true
—The packet is a fragment.
•
false
—All packets, whether or not the packets are fragments.
ToS
Type of Service, indicated by a number in the range of 0 to 15.
Pre
Packet precedence, indicated by a number in the range of 0 to 7.
DSCP
Differentiated Services Code Point, indicated by characters for Be, Ef, Af11,
Af12, Af13, Af21, Af22, Af23, Af31, Af32, Af33, Af41, Af42, Af43, Cs1,
Cs2, Cs3, Cs4, Cs5, Cs6, and Cs7 and indicated by a number in the range 0
to 63 for other code points.
TCPFlag
The value is six bits, which represents URG, ACK, PSH, RST, SYN, and FIN from
low to high.
TCPMask
The value is six bits, which represents URG mask, ACK mask, PSH mask, RST
mask, SYN mask, and FIN mask from low to high.
For each bit, the value 1 indicates that this bit is concerned, and the value 0
indicates that this bit is not concerned.
Action
Action:
•
permit
.
•
deny
.
•
mirror
.
•
redirect
.
•
rate
—rate limit.
Status
Rule status, active or inactive.
OperationStatus
Rule application status, succeeded or failed.
display acfp server-info
Use
display acfp server-info
to display ACFP server information.