The following command outputs are examples only; actual displays may differ depending on supported functionality and user configuration.
This command displays DHCP filter information.
The following is a sample command output for the command when no filter ID is specified.
This command displays DHCP6 filter information.
This command shows IPv4 filter information.
Show Filter (no filter-id specified) — The following is a sample output of IPv4 filter information when no filter ID is specified. Table 52 describes the command output fields.
Label | Description |
Filter Id | the IP filter ID |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Description | the IP filter policy description |
Show Filter (no filter-id specified, embedded keyword specified) — The following is a sample output of IPv4 filter information when no filter ID is specified but the embedded keyword is specified. Table 53 describes the command output fields.
Label | Description |
In | shows embedding filter index |
From | shows embedded filters included |
Priority | shows priority of embedded filter |
Inserted | shows embedded/total number of entries from embedded filter Status: OK—embedding operation successful, if any entries are overwritten this will also be indicated Failed—embedding failed, the reason is displayed (out of resources) |
Show Filter (with filter-id specified) — The following is a sample output of IPv4 filter information with the filter ID specified. Table 54 describes the command output fields.
Label | Description |
Filter Id | the IP filter policy ID |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
System filter | indicates if the filter has been chained to a system filter |
Radius Ins Pt | indicates the Radius insertion point, if any |
CrCtl. Ins Pt | indicates the Credit Control insertion point, if any |
RadSh. Ins Pt | indicates the Radius shared insertion point, if any |
PccRl. Ins Pt | indicates the PCC rule insertion point, if any |
Entries | the number of entries configured in this filter ID |
Description | the IP filter policy entry description string |
Filter Match Criteria | IP indicates the filter is an IP filter policy |
Entry | the filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Description | the IP filter policy entry description string |
Log Id | the filter log ID |
Src. IP | the source IPv4 address and prefix length match criterion |
Src. Port | the source TCP, UDP, or SCTP port number, port range, or port match list |
Dest. IP | the destination IPv4 address and prefix length match criterion |
Dest. Port | the destination TCP, UDP, or SCTP port number, port range, or port match list |
Protocol | the protocol for the match criteria. Undefined indicates no protocol specified. |
Dscp | the DiffServ Code Point (DSCP) name |
ICMP Type | the ICMP type match criterion. Undefined indicates no ICMP type specified. |
ICMP Code | the ICMP code field in the ICMP header of an IP packet |
Fragment | False configures a match on all non-fragmented IP packets |
True configures a match on all fragmented IP packets | |
Off Fragments are not a matching criteria. All fragments and non-fragments implicitly match. | |
Src Route Opt | indicates if the source route option has been set |
Sampling | Off specifies that traffic sampling is disabled |
On specifies that traffic matching the associated IP filter entry is sampled | |
Int. Sampling | Off Interface traffic sampling is disabled. |
On Interface traffic sampling is enabled. | |
IP-Option | specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria |
Multiple Option | Off The option fields are not checked. |
On Packets containing one or more option fields in the IP header will be used as IP filter match criteria. | |
TCP-syn | False configures a match on packets with the SYN flag set to false |
True configured a match on packets with the SYN flag set to true | |
Off The state of the TCP SYN flag is not considered as part of the match criteria. | |
TCP-ack | False configures a match on packets with the ACK flag set to false |
True configures a match on packets with the ACK flag set to true | |
Off The state of the TCP ACK flag is not considered as part of the match criteria. | |
Option-present | Off specifies not to search for packets that contain the option field or have an option field of zero |
On matches packets that contain the option field or have an option field of zero be used as IP filter match criteria | |
Egress PBR | indicates if the egress-pbr flag is set for this entry |
Primary Action | indicates the configured action, if any. Indented sub-labels in the show output provide configured parameters for this action |
Secondary Action | indicates the configured secondary action, if any. Indented sub-labels in the show output provide configured parameters for this action. |
PBR Target Status | the status of the target of the secondary action |
Extended Action | indicates the configured extended action, if any |
PBR Down Action | indicates the matching action packets that the entry criteria will be subject to if the targets of the main actions are down |
Downloaded Action | the action downloaded by CPM to IOM |
Dest. Stickiness | indicates whether stickiness is configured |
Hold Remain | the stickiness timer |
Ing. Matches | the number of ingress filter matches/hits for the filter entry |
Egr. Matches | the number of egress filter matches/hits for the filter entry |
Show Filter Associations — The following is a sample output of IPv4 filter information when the associations keyword is specified. Table 55 describes the command output fields.
Label | Description |
Filter Id | the IP filter policy ID |
Applied | No the filter policy ID has not been applied |
Yes the filter policy ID is applied | |
Scope | Template the filter policy is of type Template |
Exclusive the filter policy is of type Exclusive | |
Def. Action | Forward the default action for the filter ID for packets that do not match the filter entries is to forward |
Drop the default action for the filter ID for packets that do not match the filter entries is to drop | |
System filter | indicates if the filter has been chained to a system filter |
Radius Ins Pt | indicates the Radius insertion point, if any |
CrCtl. Ins Pt | indicates the Credit Control insertion point, if any |
RadSh. Ins Pt | indicates the Radius shared insertion point, if any |
PccRl. Ins Pt | indicates the PCC rule insertion point, if any |
Entries | the number of entries configured in this filter ID |
Description | the IP filter policy description |
Filter Association | indicates the filter is an IP filter policy |
Service Id | the service ID on which the filter policy ID is applied |
Type | the type of service of the service ID |
SAP | the Service Access Point on which the filter policy ID is applied |
(Ingress) | the filter policy ID is applied as an ingress filter policy on the interface |
(Egress) | the filter policy ID is applied as an egress filter policy on the interface |
Show Filter Counters — The following is a sample output of IPv4 filter information when the counters keyword is specified. Table 56 describes the command output fields.
Egress counters count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
Label | Description |
Filter Id | the IP filter policy ID |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Def. Action | Forward the default action for the filter ID for packets that do not match the filter entries is to forward |
Drop the default action for the filter ID for packets that do not match the filter entries is to drop | |
System filter | indicates if the filter has been chained to a system filter |
Radius Ins Pt | indicates the Radius insertion point, if any |
CrCtl. Ins Pt | indicates the Credit Control insertion point, if any |
RadSh. Ins Pt | indicates the Radius shared insertion point, if any |
PccRl. Ins Pt | indicates the PCC rule insertion point, if any |
Entries | the number of entries configured in this filter ID |
Description | the IP filter policy description |
Filter Match Criteria | IP indicates the filter is an IP filter policy |
Entry | the filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Ing. Matches | the number of ingress filter matches/hits for the filter entry |
Egr. Matches | the number of egress filter matches/hits for the filter entry |
This command shows IPv6 filter information.
Show Filter (no filter-id specified) — The following output is an example of IPv6 filter information when no filter ID is specified, and Table 57 describes the fields.
Label | Description |
Filter Id | the IP filter ID |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Description | the IP filter policy description |
In | shows embedding filter index |
From | shows embedded filters included |
Priority | shows priority of embedded filter |
Inserted | shows embedded/total number of entries from embedded filter Status: OK—embedding operation successful, if any entries are overwritten this will also be indicated Failed—embedding failed, the reason is displayed (out of resources) |
In | shows embedding filter index |
Show Filter (with filter-id specified) — The following output is an example of IPv6 filter information when filter-id is specified, and Table 58 describes the fields.
Label | Description |
Filter Id | the IP filter policy ID |
Scope | Template The filter policy is of type template. |
Exclusive The filter policy is of type exclusive. | |
Entries | the number of entries configured in this filter ID |
Description | the IP filter policy description |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward the default action for the filter ID for packets that do not match the filter entries is to forward |
Drop the default action for the filter ID for packets that do not match the filter entries is to drop | |
Filter Match Criteria | IP indicates the filter is an IP filter policy |
Entry | the filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Log Id | the filter log ID |
Src. IP | the source IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Dest. IP | the destination IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Protocol | the protocol ID for the match criteria. Undefined indicates no protocol specified. |
ICMP Type | the ICMP type match criterion. Undefined indicates no ICMP type specified. |
Fragment | False configures a match on all non-fragmented IP packets |
True configures a match on all fragmented IP packets | |
Off fragments are not a matching criteria. All fragments and nonfragments implicitly match. | |
Sampling | Off specifies that traffic sampling is disabled |
On specifies that traffic matching the associated IP filter entry is sampled | |
IP-Option | specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria |
TCP-syn | False configures a match on packets with the SYN flag set to false |
True configured a match on packets with the SYN flag set to true | |
Off The state of the TCP SYN flag is not considered as part of the match criteria | |
Match action | Default The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Drop drop packets matching the filter entry | |
Forward The explicit action to perform is forwarding of the packet. If the action is Forward, then if configured the nexthop information should be displayed, including Nexthop: <IP address>, Indirect: <IP address> or Interface: <IP interface name>. | |
Ing. Matches | the number of ingress filter matches/hits for the filter entry |
Src. Port | the source TCP, UDP, or SCTP port number, port range, or port match list |
Dest. Port | the destination TCP, UDP, or SCTP port number, port range, or port match list |
Dscp | the DiffServ Code Point (DSCP) name |
ICMP Code | the ICMP code field in the ICMP header of an IP packet |
Option-present | Off specifies not to search for packets that contain the option field or have an option field of zero |
On matches packets that contain the option field or have an option field of zero be used as IP filter match criteria | |
Int. Sampling | Off Interface traffic sampling is disabled. |
On Interface traffic sampling is enabled. | |
Multiple Option | Off The option fields are not checked. |
On Packets containing one or more option fields in the IP header will be used as IP filter match criteria. | |
TCP-ack | False configures a match on packets with the ACK flag set to false |
True configured a match on packets with the ACK flag set to true | |
Off the state of the TCP ACK flag is not considered as part of the match criteria | |
Egr. Matches | the number of egress filter matches/hits for the filter entry |
Ing. Rate-limiter | the number of offered, forwarded, and dropped packet matches for the filter entry |
Show Filter Associations — The following output is an example of IPv6 filter information when the associations keyword is specified, and Table 59 describes the fields.
Label | Description |
Filter Id | the IPv6 filter policy ID |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Entries | the number of entries configured in this filter ID |
Applied | No the filter policy ID has not been applied |
Yes the filter policy ID is applied | |
Def. Action | Forward the default action for the filter ID for packets that do not match the filter entries is to forward |
Drop the default action for the filter ID for packets that do not match the filter entries is to drop | |
Service Id | the service ID on which the filter policy ID is applied |
SAP | the Service Access Point on which the filter policy ID is applied |
(Ingress) | The filter policy ID is applied as an ingress filter policy on the interface. |
(Egress) | The filter policy ID is applied as an egress filter policy on the interface. |
Type | the type of service of the service ID |
Entry | the filter ID filter entry ID. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified. |
Log Id | the filter log ID. |
Src. IP | the source IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Dest. IP | the destination IP address and mask match criterion. 0.0.0.0/0 indicates no criterion specified for the filter entry. |
Protocol | the protocol ID for the match criteria. Undefined indicates no protocol specified. |
ICMP Type | the ICMP type match criterion. Undefined indicates no ICMP type specified. |
Fragment | False configures a match on all non-fragmented IP packets |
True configures a match on all fragmented IP packets | |
Off Fragments are not a matching criteria. All fragments and nonfragments implicitly match. | |
Sampling | Off specifies that traffic sampling is disabled |
On specifies that traffic matching the associated IP filter entry is sampled | |
IP-Option | specifies matching packets with a specific IP option or a range of IP options in the IP header for IP filter match criteria |
TCP-syn | False configures a match on packets with the SYN flag set to false |
True configures a match on packets with the SYN flag set to true | |
Off The state of the TCP SYN flag is not considered as part of the match criteria. | |
Match action | Default The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified. |
Drop drop packets matching the filter entry | |
Forward the explicit action to perform is forwarding of the packet. If the action is Forward, then if configured the nexthop information should be displayed, including Nexthop: <IP address>, Indirect: <IP address> or Interface: <IP interface name>. | |
Ing. Matches | the number of ingress filter matches/hits for the filter entry |
Src. Port | the source TCP, UDP, or SCTP port number, port range, or port match list |
Dest. Port | the destination TCP, UDP, or SCTP port number, port range, or port match list |
Dscp | the DiffServ Code Point (DSCP) name |
ICMP Code | the ICMP code field in the ICMP header of an IP packet |
Option-present | Off specifies not to search for packets that contain the option field or have an option field of zero |
On matches packets that contain the option field or have an option field of zero be used as IP filter match criteria | |
Int. Sampling | Off Interface traffic sampling is disabled. |
On Interface traffic sampling is enabled. | |
Multiple Option | Off The option fields are not checked. |
On Packets containing one or more option fields in the IP header will be used as IP filter match criteria. | |
TCP-ack | False configures a match on packets with the ACK flag set to false |
True configured a match on packets with the ACK flag set to true | |
Off the state of the TCP ACK flag is not considered as part of the match criteria | |
Egr. Matches | the number of egress filter matches/hits for the filter entry |
Show Filter Counters — The following output is an example of IPv6 filter information when the counters keyword is specified, and Table 60 describes the output fields.
Egress count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
Label | Description |
IP Filter Filter Id | the IP filter policy ID |
Scope | Template the filter policy is of type template |
Exclusive the filter policy is of type exclusive | |
Applied | No the filter policy ID has not been applied |
Yes the filter policy ID is applied | |
Def. Action | Forward the default action for the filter ID for packets that do not match the filter entries is to forward |
Drop the default action for the filter ID for packets that do not match the filter entries is to drop | |
Filter Match Criteria | IP indicates the filter is an IP filter policy |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Ing. Matches | the number of ingress filter matches/hits for the filter entry |
Egr. Matches | the number of egress filter matches/hits for the filter entry |
Egress count the packets without Layer 2 encapsulation. Ingress counters count the packets with Layer 2 encapsulation.
This command shows the contents of a memory-based or a file-based filter log.
If the optional keyword match and string parameter are given, the command displays the given filter log from the first occurrence of the given string.
The following output is an example of filter log entry information, and Table 61 describes the fields. If log summary is active, the filter log mini-tables contain the information described in Table 62.
A summary log will be printed only in case TotCnt is different from 0. Only the address types with at least 1 entry in the minitable will be printed.
Log Message Formatting — Each filter log entry contains the following information in case summary log feature is not active (as appropriate).
Label | Description |
yyyy/mm/dd hh:mm:ss | The date and timestamp for the log filter entry where yyyy is the year, mm is the month, dd is the day, hh is the hour, mm is the minute and ss is the second. |
Filter | The filter ID and the entry ID which generated the filter log entry in the form Filter_ID:Entry_ID. |
Desc | The description of the filter entry ID which generated the filter log entry. |
Interface | The IP interface on which the filter ID and entry ID was associated which generated the filter log entry. |
Action | The action of the filter entry on the logged packet. |
Src MAC | The source MAC address of the logged packet. |
Dst MAC | The destination MAC of the logged packet. |
EtherType | The Ethernet type of the logged Ethernet type II packet. |
Src IP | The source IP address of the logged packet. The source port will be displayed after the IP address as appropriate separated with a colon. |
Dst IP | The destination IP address of the logged packet. The source port will be displayed after the IP address as appropriate separated with a colon. |
Flags (IP flags) | M — The more fragments IP flag is set in the logged packet. DF — The do not fragment IP flag is set in the logged packet. |
TOS | The TOS byte value in the logged packet. |
Protocol | The IP protocol of the logged packet (TCP, UDP, ICMP or a protocol number in hex). |
Flags (TCP flags) | URG — Urgent bit set. ACK — Acknowledgment bit set. RST — Reset bit set. SYN — Synchronize bit set. FIN — Finish bit set. |
HEX | If an IP protocol does not have a supported decode, the first 32 bytes following the IP header are printed in a hex dump. Log entries for non-IP packets include the Ethernet frame information and a hex dump of the first 40 bytes of the frame after the Ethernet header. |
Total Log Instances (Allowed) | Specifies the maximum allowed instances of filter logs allowed on the system. |
Total Log Instances (In Use) | Specifies the instances of filter logs presently existing on the system. |
Total Log Bindings | Specifies the count of the filter log bindings presently existing on the system. |
Type | The type of service of the service ID. |
Filter ID | Uniquely identifies an IP filter as configured on the system. |
Entry ID | The identifier which uniquely identifies an entry in a filter table. |
Log | Specifies an entry in the filter log table. |
Instantiated | Specifies if the filter log for this filter entry has or has not been instantiated. |
If the packet being logged does not have a source or destination MAC address (that is, POS) then the MAC information output line is omitted from the log entry.
If log summary is active, the filter log mini-tables contain the information described in Table 62.
Label | Description |
Summary Log LogID | Displays the log ID. |
Crit1 | Summary criterion that is used as index into the mini-tables of the log. |
TotCnt | The total count of logs. |
ArpCnt | Displays the total number of ARP messages logged for this log ID. |
Src... Dst... | The address type indication of the key in the mini-table. |
count | The number of messages logged with the specified source/destination address. |
address | The address for which count messages where received. |
This command displays MAC filter information.
No Parameters Specified — A brief listing of MAC filters is produced when no parameters are specified; Table 63 describes the output fields.
Label | Description |
Filter Id | The MAC filter ID |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Description | The MAC filter policy description. |
Filter ID Specified — The following output is an example of MAC filter information when the filter ID is specified, and Table 64 describes the fields. Detailed filter information for the filter ID and its entries is produced when the filter ID is specified.
Label | Description |
MAC Filter Filter Id | The MAC filter policy ID. |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Description | The MAC filter policy description. |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Filter Match Criteria | MAC Indicates the filter is an MAC filter policy. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
Description | The filter entry description. |
FrameType | Ethernet The entry ID match frame type is Ethernet IEEE 802.3. |
Ethernet II The entry ID match frame type is Ethernet Type II. | |
Src MAC | The source MAC address and mask match criterion. When both the MAC address and mask are all zeros, no criterion specified for the filter entry. |
Dest MAC | The destination MAC address and mask match criterion. When both the MAC address and mask are all zeros, no criterion specified for the filter entry. |
Dot1p | The IEEE 802.1p value for the match criteria. Undefined indicates no value is specified. |
Ethertype | The Ethertype value match criterion. |
DSAP | The DSAP value match criterion. Undefined indicates no value specified. |
SSAP | SSAP value match criterion. Undefined indicates no value specified. |
Snap-pid | The Ethernet SNAP PID value match criterion. Undefined indicates no value specified. |
Esnap-oui-zero | Non-Zero Filter entry matches a non-zero value for the Ethernet SNAP OUI. |
Zero Filter entry matches a zero value for the Ethernet SNAP OUI. | |
Undefined No Ethernet SNAP OUI value specified. | |
Match action | Default The filter does not have an explicit forward or drop match action specified. If the filter entry ID indicates the entry is Inactive, the filter entry is incomplete, no action was specified. |
Drop Packets matching the filter entry criteria will be dropped. | |
Forward Packets matching the filter entry criteria is forwarded. | |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
Filter Associations — The associations for a filter ID will be displayed if the associations keyword is specified. The association information is appended to the filter information.
The following output is an example of MAC filter information when the associations keyword is specified, and Table 65 describes the fields.
Label | Description |
Filter Association | Mac The filter associations displayed are for a MAC filter policy ID. |
Service Id | The service ID on which the filter policy ID is applied. |
SAP | The Service Access Point or spoke/mesh SDP on which the filter policy ID is applied. |
Type | The type of service of the Service ID. |
(Ingress) | The filter policy ID is applied as an ingress filter policy on the interface. |
(Egress) | The filter policy ID is applied as an egress filter policy on the interface. |
Filter Entry Counters Output — When the counters keyword is specified, the filter entry output displays the filter matches/hit information. The following table describes the command output for the command.
Label | Description |
Mac Filter Filter Id | The MAC filter policy ID. |
Scope | Template The filter policy is of type Template. |
Exclusive The filter policy is of type Exclusive. | |
Description | The MAC filter policy description. |
Applied | No The filter policy ID has not been applied. |
Yes The filter policy ID is applied. | |
Def. Action | Forward The default action for the filter ID for packets that do not match the filter entries is to forward. |
Drop The default action for the filter ID for packets that do not match the filter entries is to drop. | |
Filter Match Criteria | Mac Indicates the filter is an MAC filter policy. |
Entry | The filter ID filter entry ID. If the filter entry ID indicates the entry is (Inactive), then the filter entry is incomplete as no action has been specified. |
FrameType | Ethernet The entry ID match frame type is Ethernet IEEE 802.3. |
802.2LLC The entry ID match frame type is Ethernet IEEE 802.2 LLC. | |
802.2SNAP The entry ID match frame type is Ethernet IEEE 802.2 SNAP. | |
Ethernet II The entry ID match frame type is Ethernet Type II. | |
Ing. Matches | The number of ingress filter matches/hits for the filter entry. |
Egr. Matches | The number of egress filter matches/hits for the filter entry. |
This command shows redirect filter information.
Redirect Policy Output — The following output is an example of redirect policy information, and Table 67 describes the fields.
Label | Description |
Redirect Policy | Specifies a specific redirect policy. |
Applied | Specifies whether the redirect policy is applied to a filter policy entry. |
Description | Displays the user-provided description for this redirect policy. |
Active Destination | ip address Specifies the IP address of the active destination. |
none Indicates that there is currently no active destination. | |
Destination | Specifies the destination IP address. |
Oper Priority | Specifies the operational value of the priority for this destination. The highest operational priority across multiple destinations is used as the preferred destination. |
Admin Priority | Specifies the configured base priority for the destination. |
Admin State | Specifies the configured state of the destination. |
Out of Service Tests for this destination will not be conducted. | |
Oper State | Specifies the operational state of the destination. |
Ping Test | Specifies the name of the ping test. |
Timeout | Specifies the amount of time in seconds that is allowed for receiving a response from the far-end host. If a reply is not received within this time the far-end host is considered unresponsive. |
Interval | Specifies the amount of time in seconds between consecutive requests sent to the far end host. |
Drop Count | Specifies the number of consecutive requests that must fail for the destination to declared unreachable. |
Hold Down | Specifies the amount of time in seconds that the system should be held down if any of the test has marked it unreachable. |
Hold Remain | Specifies the amount of time in seconds that the system will remain in a hold down state before being used again. |
Last Action at | Displays a time stamp of when this test received a response for a probe that was sent out. |
SNMP Test | Specifies the name of the SNMP test. |
URL Test | Specifies the name of the URL test. |
This command shows system filter information.
No Parameters Specified — When no parameters are specified, the output is grouped for IPv4 and IPv6, and displays information about the active system filter and all filters with scope system.
The following output is an example of system filter information when no parameters are specified.
With chained-to Option Specified — The following output is an example of system filter information when the chained-to option is specified, .
This command enables the context to display information for match lists used in filter policies (IOM/FP and CPM).
This command displays IPv4 prefixes information for match criteria in IPv4 ACL and CPM filter policies.
This command displays IPv6 prefixes information for match criteria in IPv6 ACL and CPM filter policies.
This command displays TCP/UDP/SCTP port values or ranges for match criteria in IPv4 and IPv6 ACL and CPM filter policies.
Clears the counters associated with the entries of the specified IPv4 filter policy.
By default, the counters associated with each entry of the specified filter policy are all cleared. The scope of which counters are cleared can be narrowed using the command line parameters.
Clears all counters associated with each entry of the specified IPv4 filter policy.
Clears the counters associated with the entries of the specified IPv6 filter policy.
By default, the counters associated with each entry of the specified filter policy are all cleared. The scope of which counters are cleared can be narrowed using the command line parameters.
Clears all counters associated with each entry of the specified IPv6 filter policy.
Clears the contents of a memory or file based filter log.
This command has no effect on a syslog based filter log.
Clears the counters associated with the entries of the specified MAC filter policy.
By default, the counters associated with each entry of the specified filter policy are all cleared. The scope of which counters are cleared can be narrowed using the command line parameters.
Clears all counters associated with each entry of the specified MAC filter policy.
The following command outputs are examples only; actual displays may differ depending on supported functionality and user configuration.
This command monitors the counters associated with the specified entry of the specified IP filter policy.
This command monitors the counters associated with the IPv6 filter policy.
This command monitors the counters associated with the specified entry of the specified MAC filter policy.
The following command outputs are examples only; actual displays may differ depending on supported functionality and user configuration.
This command displays information about filter resource utilization on the CPM, consumption by filter-using services like TMS, OpenFlow, and the filters that use the most resources.
The following output is an example of filter resource utilization information.
This command displays information about resources pertaining to tracked targets.
The following output is an example of filter resource SAP destination tracking information.
The following output is an example of filter resource SAP destination tracking detailed information.
This command displays the number of allocated unique egress PBR destinations.
The following output is an example of filter resource egress PBR destination information.
This command shows information about filter resource utilization on all IOMs or a specified IOM. Resource utilization per filter type is available, as well as filters using most resources on a given line card.
The following output is an example of filter resource utilization information for all IOMs.
This command displays information about the specified IP filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
The following output is an example of IP filter resource utilization information.
This command displays information about the specified IPv6 filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
The following output is an example of IPv6 filter resource utilization information.
This command displays information about the specified MAC filter including resource utilization on CPM and IOM, the IOMs on which the filter is used, and the entries using the most resources.
The following output is an example of MAC filter resource utilization information.
This command displays information about resources pertaining to sticky destinations timers.
The following output is an example of sticky destination filter action information.
This command allows the operator to force a PBR switch to the best destination selected by the redirect policy when that destination is not currently active as result of sticky destination functionality being enabled for the specified redirect policy. If hold-time-up is running, the timer is also expired.
This command allows an operator to activate the primary action for the given filter policy entry. If the primary action is already active, the command has no effect. If a secondary action is active, the primary action will be activated unless the primary target is down. If the sticky destination timer is running for the primary action entry, it will expire.