7.6.1.0 - Force10 Networks

To view which IP ACL is applied to an interface, use the show config command (Figure 173) in the
INTERFACE mode or the show running-config command in the EXEC mode.
Figure 173 show config Command in the INTERFACE Mode
Use only Standard ACLs in the access-class command to filter traffic on Telnet sessions.
Counting ACL Hits
You can view the number of packets matching the ACL by using the count option when creating ACL
entries. E-Series supports packet and byte counts simultaneously. C-Series supports only one at any given
time.
To view the number of packets match an ACL that is applied to an interface:
Step Task
Force10(conf-if)#show conf
!
interface GigabitEthernet 0/0
ip address 10.2.1.100 255.255.255.0
ip access-group nimule in
no shutdown
Force10(conf-if)#
1 Create an ACL that uses rules with the count option. See Configuration Task List for IP ACLs on
page 248
2 Apply the ACL as an inbound or outbound ACL on an interface. See Assign an IP ACL to an Interface
on page 255
3 View the number of packets matching the ACL using the show ip accounting access-list from
EXEC Privilege mode.
Configuring Ingress ACLs
Ingress ACLs are applied to interfaces and to traffic entering the system.These system-wide ACLs
eliminate the need to apply ACLs onto each interface and achieves the same results. By localizing target
traffic, it is a simpler implementation.
256 IP Access Control Lists, Prefix Lists, and Route-maps