In this section:


Use SBC Core CLI and EMA to view ACL Rule statistics. 

Viewing Default ACL Statistics Using CLI

Use following commands to view ACL statistics for default address context.


Note

The Bucket Size value is insignificant if the Fill Rate value is unlimited.

  • The Fill Rate is the maximum rate you expect for the traffic to pass the policer.
  • The Bucket Size is the number of additional packets allowed to pass in a given period if available packets are in the bucket. The credit balance is consumed before the packets are discarded.

If the ACL rules with action = discard, the Fill Rate and the Bucket Size values are irrelevant, and the packets are dropped based on the Type, IP address, or Port.

The Fill Rate and the Bucket Size parameters do not play any role since the policer portion of an ACL is only applicable for the "accept" action and is ignored with the "discard" action since all the packets are already discarded by the criteria.

CLI CommandPurpose
> show status addressContext default ipAccessControlList defaultAclStatistics
To view system default ACL rules and statistics
> show status addressContext default ipAccessControlList ipAclOverallStatistics

To view the system-defined ACL overall statistics.

> show table addressContext default ipAccessControlList ipAclRuleStatistics
To view rule statistics for a specific rule.

Viewing System Default ACL Statistics Using EMA

To view system default access control list rule and statistics, perform the following:

  1. On SBC main screen, navigate to All > Address Context > Ip Access Control List > Default Acl Statistics.
  2. Select the required Address Context from the from the Address Context drop-down menu. In this example, the default Address Context is selected.

  3. The Default Acl Statistics window is displayed.
    Figure 1: Default ACL statistics screen

Viewing ACL Overall Statistics Using EMA

To view the ACL overall statistics, perform the following:

  1. On SBC main screen, navigate to Monitoring > Security > IP Access Control List > Ip Acl Overall Statistics.
  2. Select the required Address Context from the Address Context drop-down menu.
  3. The IP Acl Overall Statistics window is displayed.
    Figure 2: Ip Acl Overall Statistics

Viewing IP ACL Rule Statistics Using EMA

To view ACL Rule statistics, perform the following:

  1. On SBC main screen, navigate to Monitoring > Security > IP Access Control List > Ip Acl Rule Statistics.
  2. Select the required Address Context from the Address Context drop-down menu.

  3. The IP ACL Rule Statistics window is displayed.
    Figure 3: Ip Acl Rule Statistics


IP ACL stats are available only for 2000 entries through the SBC EMA.

Related Topics

Address Context - IP Access Control List (EMA Reference)

IP ACL Policing - Packet Filtering  (Feature Description)

IP Access Control List - Cloud - CLI

  • No labels