In this section:
Overview
Use SBC Core CLI and EMA to view ACL Rule statistics.
Viewing Default ACL Statistics Using CLI
Use following commands to view ACL statistics for default address context.
The Bucket Size value is insignificant if the Fill Rate value is unlimited. If the ACL rules with action = discard, the Fill Rate and the Bucket Size values are irrelevant, and the packets are dropped based on the Type, IP address, or Port. The Fill Rate and the Bucket Size parameters do not play any role since the policer portion of an ACL is only applicable for the "accept" action and is ignored with the "discard" action since all the packets are already discarded by the criteria.
CLI Command | Purpose |
---|---|
> show status addressContext default ipAccessControlList defaultAclStatistics | To view system default ACL rules and statistics |
> show status addressContext default ipAccessControlList ipAclOverallStatistics | To view the system-defined ACL overall statistics. |
> show table addressContext default ipAccessControlList ipAclRuleStatistics | To view rule statistics for a specific rule. |
Viewing System Default ACL Statistics Using EMA
To view system default access control list rule and statistics, perform the following:
- On SBC main screen, navigate to All > Address Context > Ip Access Control List > Default Acl Statistics.
- Select the required Address Context from the from the Address Context drop-down menu. In this example, the default Address Context is selected.
The Default Acl Statistics window is displayed.
Figure 1: Default ACL statistics screen
Viewing ACL Overall Statistics Using EMA
To view the ACL overall statistics, perform the following:
- On SBC main screen, navigate to Monitoring > Security > IP Access Control List > Ip Acl Overall Statistics.
- Select the required Address Context from the Address Context drop-down menu.
- The IP Acl Overall Statistics window is displayed.
Figure 2: Ip Acl Overall Statistics
Viewing IP ACL Rule Statistics Using EMA
To view ACL Rule statistics, perform the following:
- On SBC main screen, navigate to Monitoring > Security > IP Access Control List > Ip Acl Rule Statistics.
- Select the required Address Context from the Address Context drop-down menu.
The IP ACL Rule Statistics window is displayed.
Figure 3: Ip Acl Rule Statistics
IP ACL stats are available only for 2000 entries through the SBC EMA.
Related Topics
Address Context - IP Access Control List (EMA Reference)
IP ACL Policing - Packet Filtering (Feature Description)