The following command outputs are examples only; actual displays may differ depending on supported functionality and user configuration.
This command displays DHCP filter information.
The following is a sample command output for the command when no filter ID is specified.
This command displays DHCP6 filter information.
This command shows IPv4 filter information.
Show Filter (no filter-id specified) — The following table describes the command output for the command when no filter ID is specified.
Label | Description |
Filter Id | The IP filter ID |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Description | The IP filter policy description. |
In | Shows embedding filter index |
From | Shows embedded filters included |
Priority | Shows priority of embedded filter |
Inserted | Shows embedded/total number of entries from embedded filter Status: OK—embedding operation successful, if any entries are overwritten this will also be indicated. Failed—embedding failed, the reason is displayed (out of resources). |
Show Filter (with filter-id specified) — The following table describes the command output for the command when a filter ID is specified.
Label | Description |
Filter Id | The IP filter policy ID. |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Entries | The number of entries configured in this filter ID. |
Description | The IP filter policy description. |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Filter Match Criteria | IP Indicates the filter is an IP filter policy. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Log Id | The filter log ID. |
Src. IP | The source IPv6 address and prefix length match criterion. |
Dest. IP | The destination IPv6 address and prefix length match criterion. |
Next-header | The next header ID for the match criteria. Undefined indicates no next-header specified. |
ICMP Type | The ICMP type match criterion. Undefined indicates no ICMP type specified. |
Fragment | False Configures a match on all non-fragmented IP packets. |
True Configures a match on all fragmented IP packets. | |
Off Fragments are not a matching criteria. All fragments and non-fragments implicitly match. | |
Sampling | Off Specifies that traffic sampling is disabled. |
On Specifies that traffic matching the associated IP filter entry is sampled. | |
IP-Option | Specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria. |
TCP-syn | False Configures a match on packets with the SYN flag set to false. |
True Configured a match on packets with the SYN flag set to true. | |
Off The state of the TCP SYN flag is not considered as part of the match criteria. | |
Match action | Default The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified. |
Drop Drop packets matching the filter entry. | |
Forward The explicit action to perform is forwarding of the packet. | |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Src. Port | The source TCP, UDP, or SCTP port number, port range, or port match list. |
Dest. Port | The destination TCP, UDP, or SCTP port number, port range, or port match list. |
Dscp | The DiffServ Code Point (DSCP) name. |
ICMP Code | The ICMP code field in the ICMP header of an IP packet. |
Option-present | Off Specifies not to search for packets that contain the option field or have an option field of zero. |
On Matches packets that contain the option field or have an option field of zero be used as IP filter match criteria. | |
Int. Sampling | Off Interface traffic sampling is disabled. |
On Interface traffic sampling is enabled. | |
Multiple Option | Off The option fields are not checked. |
On Packets containing one or more option fields in the IP header will be used as IP filter match criteria. | |
TCP-ack | False Configures a match on packets with the ACK flag set to false. |
True Configures a match on packets with the ACK flag set to true. | |
Off The state of the TCP ACK flag is not considered as part of the match criteria. as part of the match criteria. | |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
Sample Output:
Show Filter Associations — The following table describes the fields that display when the associations keyword is specified.
Label | Description |
Filter Id | The IP filter policy ID. |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Entries | The number of entries configured in this filter ID. |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Service Id | The service ID on which the filter policy ID is applied. |
SAP | The Service Access Point on which the filter policy ID is applied. |
(Ingress) | The filter policy ID is applied as an ingress filter policy on the interface. |
(Egress) | The filter policy ID is applied as an egress filter policy on the interface. |
Type | The type of service of the service ID. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete as no action was specified. |
Log Id | The filter log ID. |
Src. IP | The source IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Dest. IP | The destination IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Protocol | The protocol ID for the match criteria. Undefined indicates no protocol specified. |
ICMP Type | The ICMP type match criterion. Undefined indicates no ICMP type specified. |
Fragment | False Configures a match on all non-fragmented IP packets. |
True Configures a match on all fragmented IP packets. | |
Off Fragments are not a matching criteria. All fragments and nonfragments implicitly match. | |
Sampling | Off Specifies that traffic sampling is disabled. |
On Specifies that traffic matching the associated IP filter entry is sampled. | |
IP-Option | Specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria. |
TCP-syn | False Configures a match on packets with the SYN flag set to false. |
True Configured a match on packets with the SYN flag set to true. | |
Off The state of the TCP SYN flag is not considered as part of the match criteria. | |
Match action | Default The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete (no action was specified). |
Drop Drop packets matching the filter entry. | |
Forward The explicit action to perform is forwarding of the packet. If the action is Forward, then if configured the nexthop information should be displayed, including Nexthop: <IP address>, Indirect: <IP address> or Interface: <IP interface name>. | |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Src. Port | The source TCP, UDP, or SCTP port number, port range, or port match list. |
Dest. Port | The destination TCP, UDP, or SCTP port number, port range, or port match list. |
Dscp | The DiffServ Code Point (DSCP) name. |
ICMP Code | The ICMP code field in the ICMP header of an IP packet. |
Option-present | Off Specifies not to search for packets that contain the option field or have an option field of zero. |
On Matches packets that contain the option field or have an option field of zero be used as IP filter match criteria. | |
Int. Sampling | Off Interface traffic sampling is disabled. |
On Interface traffic sampling is enabled. | |
Multiple Option | Off The option fields are not checked. |
On Packets containing one or more option fields in the IP header will be used as IP filter match criteria. | |
TCP-ack | False Configures a match on packets with the ACK flag set to false. |
True configures a match on packets with the ACK flag set to true. | |
Off The state of the TCP ACK flag is not considered as part of the match criteria.h criteria. | |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
Sample Output:
Show Filter Counters — The following table describes the output fields when the counters keyword is specified.
Label | Description |
IP Filter Filter Id | The IP filter policy ID. |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Filter Match Criteria | IP Indicates the filter is an IP filter policy. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
Egress counters count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
This command shows IPv6 filter information.
Show Filter (no filter-id specified) — The following table describes the command output for the command when no filter ID is specified.
Label | Description |
Filter Id | The IP filter ID |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Description | The IP filter policy description. |
In | Shows embedding filter index |
From | Shows embedded filters included |
Priority | Shows priority of embedded filter |
Inserted | Shows embedded/total number of entries from embedded filter Status: OK—embedding operation successful, if any entries are overwritten this will also be indicated. Failed—embedding failed, the reason is displayed (out of resources). |
In | Shows embedding filter index |
Show Filter (with filter-id specified) — The following table describes the command output for the command when a filter ID is specified.
Label | Description |
Filter Id | The IP filter policy ID. |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Entries | The number of entries configured in this filter ID. |
Description | The IP filter policy description. |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Filter Match Criteria | IP Indicates the filter is an IP filter policy. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Log Id | The filter log ID. |
Src. IP | The source IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Dest. IP | The destination IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Protocol | The protocol ID for the match criteria. Undefined indicates no protocol specified. |
ICMP Type | The ICMP type match criterion. Undefined indicates no ICMP type specified. |
Fragment | False Configures a match on all non-fragmented IP packets. |
True Configures a match on all fragmented IP packets. | |
Off Fragments are not a matching criteria. All fragments and nonfragments implicitly match. | |
Sampling | Off Specifies that traffic sampling is disabled. |
On Specifies that traffic matching the associated IP filter entry is sampled. | |
IP-Option | Specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria. |
TCP-syn | False Configures a match on packets with the SYN flag set to false. |
True Configured a match on packets with the SYN flag set to true. | |
Off The state of the TCP SYN flag is not considered as part of the match criteria. | |
Match action | Default The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Drop Drop packets matching the filter entry. | |
Forward The explicit action to perform is forwarding of the packet. If the action is Forward, then if configured the nexthop information should be displayed, including Nexthop: <IP address>, Indirect: <IP address> or Interface: <IP interface name>. | |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Src. Port | The source TCP, UDP, or SCTP port number, port range, or port match list. |
Dest. Port | The destination TCP, UDP, or SCTP port number, port range, or port match list. |
Dscp | The DiffServ Code Point (DSCP) name. |
ICMP Code | The ICMP code field in the ICMP header of an IP packet. |
Option-present | Off Specifies not to search for packets that contain the option field or have an option field of zero. |
On Matches packets that contain the option field or have an option field of zero be used as IP filter match criteria. | |
Int. Sampling | Off Interface traffic sampling is disabled. |
On Interface traffic sampling is enabled. | |
Multiple Option | Off The option fields are not checked. |
On Packets containing one or more option fields in the IP header will be used as IP filter match criteria. | |
TCP-ack | False Configures a match on packets with the ACK flag set to false. |
True Configured a match on packets with the ACK flag set to true. | |
Off The state of the TCP ACK flag is not considered as part of the match criteria. | |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
Ing. Rate-limiter | The number of offered, forwarded, and dropped packet matches for the filter entry. |
Show Filter Associations — The following table describes the fields that display when the associations keyword is specified.
Label | Description |
Filter Id | The IPv6 filter policy ID. |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Entries | The number of entries configured in this filter ID. |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Service Id | The service ID on which the filter policy ID is applied. |
SAP | The Service Access Point on which the filter policy ID is applied. |
(Ingress) | The filter policy ID is applied as an ingress filter policy on the interface. |
(Egress) | The filter policy ID is applied as an egress filter policy on the interface. |
Type | The type of service of the service ID. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified. |
Log Id | The filter log ID. |
Src. IP | The source IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Dest. IP | The destination IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Protocol | The protocol ID for the match criteria. Undefined indicates no protocol specified. |
ICMP Type | The ICMP type match criterion. Undefined indicates no ICMP type specified. |
Fragment | False Configures a match on all non-fragmented IP packets. |
True Configures a match on all fragmented IP packets. | |
Off Fragments are not a matching criteria. All fragments and nonfragments implicitly match. | |
Sampling | Off Specifies that traffic sampling is disabled. |
On Specifies that traffic matching the associated IP filter entry is sampled. | |
IP-Option | Specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria. |
TCP-syn | False Configures a match on packets with the SYN flag set to false. |
True Configures a match on packets with the SYN flag set to true. | |
Off The state of the TCP SYN flag is not considered as part of the match criteria. | |
Match action | Default The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified. |
Drop Drop packets matching the filter entry. | |
Forward The explicit action to perform is forwarding of the packet. If the action is Forward, then if configured the nexthop information should be displayed, including Nexthop: <IP address>, Indirect: <IP address> or Interface: <IP interface name>. | |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Src. Port | The source TCP, UDP, or SCTP port number, port range, or port match list. |
Dest. Port | The destination TCP, UDP, or SCTP port number, port range, or port match list. |
Dscp | The DiffServ Code Point (DSCP) name. |
ICMP Code | The ICMP code field in the ICMP header of an IP packet. |
Option-present | Off Specifies not to search for packets that contain the option field or have an option field of zero. |
On Matches packets that contain the option field or have an option field of zero be used as IP filter match criteria. | |
Int. Sampling | Off Interface traffic sampling is disabled. |
On Interface traffic sampling is enabled. | |
Multiple Option | Off The option fields are not checked. |
On Packets containing one or more option fields in the IP header will be used as IP filter match criteria. | |
TCP-ack | False Configures a match on packets with the ACK flag set to false. |
True Configured a match on packets with the ACK flag set to true. | |
Off The state of the TCP ACK flag is not considered as part of the match criteria. | |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
Show Filter Counters — The following table describes the output fields when the counters keyword is specified.
Label | Description |
IP Filter Filter Id | The IP filter policy ID. |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Filter Match Criteria | IP Indicates the filter is an IP filter policy. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
Egress count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
This command shows the contents of a memory-based or a file-based filter log.
If the optional keyword match and string parameter are given, the command displays the given filter log from the first occurrence of the given string.
Log Message Formatting — Each filter log entry contains the following information in case summary log feature is not active (as appropriate).
Label | Description |
yyyy/mm/dd hh:mm:ss | The date and timestamp for the log filter entry where yyyy is the year, mm is the month, dd is the day, hh is the hour, mm is the minute and ss is the second. |
Filter | The filter ID and the entry ID which generated the filter log entry in the form Filter_ID:Entry_ID. |
Desc | The description of the filter entry ID which generated the filter log entry. |
Interface | The IP interface on which the filter ID and entry ID was associated which generated the filter log entry. |
Action | The action of the filter entry on the logged packet. |
Src MAC | The source MAC address of the logged packet. |
Dst MAC | The destination MAC of the logged packet. |
EtherType | The Ethernet type of the logged Ethernet type II packet. |
Src IP | The source IP address of the logged packet. The source port will be displayed after the IP address as appropriate separated with a colon. |
Dst IP | The destination IP address of the logged packet. The source port will be displayed after the IP address as appropriate separated with a colon. |
Flags (IP flags) | M — The more fragments IP flag is set in the logged packet. DF — The do not fragment IP flag is set in the logged packet. |
TOS | The TOS byte value in the logged packet. |
Protocol | The IP protocol of the logged packet (TCP, UDP, ICMP or a protocol number in hex). |
Flags (TCP flags) | URG — Urgent bit set. ACK — Acknowledgment bit set. RST — Reset bit set. SYN — Synchronize bit set. FIN — Finish bit set. |
HEX | If an IP protocol does not have a supported decode, the first 32 bytes following the IP header are printed in a hex dump. Log entries for non-IP packets include the Ethernet frame information and a hex dump of the first 40 bytes of the frame after the Ethernet header. |
Total Log Instances (Allowed) | Specifies the maximum allowed instances of filter logs allowed on the system. |
Total Log Instances (In Use) | Specifies the instances of filter logs presently existing on the system. |
Total Log Bindings | Specifies the count of the filter log bindings presently existing on the system. |
Type | The type of service of the service ID. |
Filter ID | Uniquely identifies an IP filter as configured on the system. |
Entry ID | The identifier which uniquely identifies an entry in a filter table. |
Log | Specifies an entry in the filter log table. |
Instantiated | Specifies if the filter log for this filter entry has or has not been instantiated. |
If the packet being logged does not have a source or destination MAC address (i.e., POS) then the MAC information output line is omitted from the log entry.
In case log summary is active, the filter log mini-tables contain the following information..
Label | Description |
Summary Log LogID | Displays the log ID. |
Crit1 | Summary criterion that is used as index into the mini-tables of the log. |
TotCnt | The total count of logs. |
ArpCnt | Displays the total number of ARP messages logged for this log ID. |
Src... Dst... | The address type indication of the key in the mini-table. |
count | The number of messages logged with the specified source/destination address. |
address | The address for which count messages where received. |
A summary log will be printed only in case TotCnt is different from 0. Only the address types with at least 1 entry in the minitable will be printed.
This command displays MAC filter information and only applies to the 7750 SR and 7450 ESS.
No Parameters Specified — When no parameters are specified, a brief listing of MAC filters is produced. The following table describes the command output for the command.
Label | Description |
Filter Id | The MAC filter ID |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Description | The MAC filter policy description. |
Filter ID Specified — When the filter ID is specified, detailed filter information for the filter ID and its entries is produced. The following table describes the command output for the command.
Label | Description |
MAC Filter Filter Id | The MAC filter policy ID. |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Description | The MAC filter policy description. |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Filter Match Criteria | MAC Indicates the filter is an MAC filter policy. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Description | The filter entry description. |
FrameType | Ethernet The entry ID match frame type is Ethernet IEEE 802.3. |
Ethernet II The entry ID match frame type is Ethernet Type II. | |
Src MAC | The source MAC address and mask match criterion. When both the MAC address and mask are all zeros, no criterion specified for the filter entry. |
Dest MAC | The destination MAC address and mask match criterion. When both the MAC address and mask are all zeros, no criterion specified for the filter entry. |
Dot1p | The IEEE 802.1p value for the match criteria. Undefined indicates no value is specified. |
Ethertype | The Ethertype value match criterion. |
DSAP | The DSAP value match criterion. Undefined indicates no value specified. |
SSAP | SSAP value match criterion. Undefined indicates no value specified. |
Snap-pid | The Ethernet SNAP PID value match criterion. Undefined indicates no value specified. |
Esnap-oui-zero | Non-Zero Filter entry matches a non-zero value for the Ethernet SNAP OUI. |
Zero Filter entry matches a zero value for the Ethernet SNAP OUI. | |
Undefined No Ethernet SNAP OUI value specified. | |
Match action | Default The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified. |
Drop Packets matching the filter entry criteria will be dropped. | |
Forward Packets matching the filter entry criteria is forwarded. | |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
Filter Associations — The associations for a filter ID will be displayed if the associations keyword is specified. The association information is appended to the filter information. The following table describes the fields in the appended associations output.
Label | Description |
Filter Association | Mac The filter associations displayed are for a MAC filter policy ID. |
Service Id | The service ID on which the filter policy ID is applied. |
SAP | The Service Access Point or spoke/mesh SDP on which the filter policy ID is applied. |
Type | The type of service of the Service ID. |
(Ingress) | The filter policy ID is applied as an ingress filter policy on the interface. |
(Egress) | The filter policy ID is applied as an egress filter policy on the interface. |
Filter Entry Counters Output — When the counters keyword is specified, the filter entry output displays the filter matches/hit information. The following table describes the command output for the command.
Label | Description |
Mac Filter Filter Id | The MAC filter policy ID. |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Description | The MAC filter policy description. |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Filter Match Criteria | Mac Indicates the filter is an MAC filter policy. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
FrameType | Ethernet The entry ID match frame type is Ethernet IEEE 802.3. |
802.2LLC The entry ID match frame type is Ethernet IEEE 802.2 LLC. | |
802.2SNAP The entry ID match frame type is Ethernet IEEE 802.2 SNAP. | |
Ethernet II The entry ID match frame type is Ethernet Type II. | |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
This command shows redirect filter information.
Redirect Policy Output — The following table describes the fields in the redirect policy command output.
Label | Description |
Redirect Policy | Specifies a specific redirect policy. |
Applied | Specifies whether the redirect policy is applied to a filter policy entry. |
Description | Displays the user-provided description for this redirect policy. |
Active Destination | ip address Specifies the IP address of the active destination. |
none Indicates that there is currently no active destination. | |
Destination | Specifies the destination IP address. |
Oper Priority | Specifies the operational value of the priority for this destination. The highest operational priority across multiple destinations is used as the preferred destination. |
Admin Priority | Specifies the configured base priority for the destination. |
Admin State | Specifies the configured state of the destination. |
Out of Service Tests for this destination will not be conducted. | |
Oper State | Specifies the operational state of the destination. |
Ping Test | Specifies the name of the ping test. |
Timeout | Specifies the amount of time in seconds that is allowed for receiving a response from the far-end host. If a reply is not received within this time the far-end host is considered unresponsive. |
Interval | Specifies the amount of time in seconds between consecutive requests sent to the far end host. |
Drop Count | Specifies the number of consecutive requests that must fail for the destination to declared unreachable. |
Hold Down | Specifies the amount of time in seconds that the system should be held down if any of the test has marked it unreachable. |
Hold Remain | Specifies the amount of time in seconds that the system will remain in a hold down state before being used again. |
Last Action at | Displays a time stamp of when this test received a response for a probe that was sent out. |
SNMP Test | Specifies the name of the SNMP test. |
URL Test | Specifies the name of the URL test. |
This command shows system filter information.
No Parameters Specified — When no parameters are specified, the following information is displayed (grouped for IPv4 and IPv6): active system filter and all filters with scope system.
With Option (chained-to) Specified — When the chained-to option is specified, the following information is displayed.
This command enables the context to display information for match lists used in filter policies (IOM/FP and CPM).
This command displays IPv4 prefixes information for match criteria in IPv4 ACL and CPM filter policies.
This command displays IPv6 prefixes information for match criteria in IPv6 ACL and CPM filter policies. This command only applies to the 7750 SR.
This command displays TCP/UDP/SCTP port values or ranges for match criteria in IPv4 and IPv6 ACL and CPM filter policies.
Clears the counters associated with the entries of the specified IPv4 filter policy.
By default, the counters associated with each entry of the specified filter policy are all cleared. The scope of which counters are cleared can be narrowed using the command line parameters.
Clears all counters associated with each entry of the specified IPv4 filter policy.
Clears the counters associated with the entries of the specified IPv6 filter policy.
By default, the counters associated with each entry of the specified filter policy are all cleared. The scope of which counters are cleared can be narrowed using the command line parameters.
Clears all counters associated with each entry of the specified IPv6 filter policy.
Clears the contents of a memory or file based filter log.
This command has no effect on a syslog based filter log.
Clears the counters associated with the entries of the specified MAC filter policy.
By default, the counters associated with each entry of the specified filter policy are all cleared. The scope of which counters are cleared can be narrowed using the command line parameters.
Clears all counters associated with each entry of the specified MAC filter policy.
The following command outputs are examples only; actual displays may differ depending on supported functionality and user configuration.
This command monitors the counters associated with the specified entry of the specified IP filter policy.
This command monitors the counters associated with the IPv6 filter policy.
This command monitors the counters associated with the specified entry of the specified MAC filter policy.
The following command outputs are examples only; actual displays may differ depending on supported functionality and user configuration.
This command displays information about filter resource utilization on the CPM, consumption by filter-using services like TMS, OpenFlow, and the filters that use the most resources.
This command displays the number of allocated unique egress PBR destinations.
This command shows information about filter resource utilization on all IOMs or a specified IOM. Resource utilization per filter type is available, as well as filters using most resources on a given line card.
This command displays information about the specified IP filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
This command displays information about the specified IPv6 filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
This command displays information about the specified MAC filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
This command allows the operator to force a PBR switch to the best destination selected by the redirect policy when that destination is not currently active as result of sticky destination functionality being enabled for the specified redirect policy. If hold-time-up is running, the timer is also expired.
This command allows operator to activate the primary action for the given filter policy entry. If the primary action is already active, the command has no effect. If a secondary action is active, the primary action will be activated unless down. If the hold-time-up is running for the primary action entry, the timer is also expired.