41
Troubleshooting flowchart
Figure 15
Troubleshooting an ACL application failure
Solution
To resolve the problem:
1.
Verify that overlapping ACL rules that have been applied exist.
a.
Use one of the following commands to display applied ACLs:
−
display qos policy user-defined
−
display traffic classifier user-defined
b.
Execute the
display acl
command to verify that the applied ACL rules overlap.
For example, the output shows that rule 0 in ACL 3100 and rule 0 in ACL 3009 overlap. They
both can match traffic sourced from 2.2.2.1.
ACL number 3100
rule 0 permit ip source 2.2.2.2 255.255.0.0
ACL number 3009
rule 0 permit ip source 2.2.2.2 255.255.255.0
2.
Verify that the behaviors for packets matching the overlapping ACLs do not conflict.
If the behaviors conflict, the device chooses a behavior according to the rules shown in
Table 2
.
The ineffective behavior and the ACL for the associated traffic class do not take effect.
