364 Configuring and Managing Security ACLs
320657-A
You can also view a specific security ACL. For example, to view acl-2, type the following command:
23x0# show security acl info acl-2
ACL information for acl-2
set security acl ip acl-2 (hits #1 0)
----------------------------------------------------
1. permit L4 Protocol 115 source IP 192.168.1.11 0.0.0.0 destination IP
192.168.1.15 0.0.0.0 precedence 0 tos 0 enable-hits
Displaying Security ACL Hits
Once you map an ACL, you can view the number of packets it has filtered, if you included the keyword hits. (For infor-
mation on setting hits, see “Setting a Source IP ACL” on page 354.) Type the following command:
23x0# show security acl hits
ACL hit-counters
Index Counter ACL-name
----- -------------------- --------
1 0 acl-2
2 0 acl-999
5 916 acl-123
To sample the number of hits the security ACLs generate, you must specify the number of seconds between samples. For
example, to sample the hits generated every 180 seconds, type the following commands:
23x0# hit-sample-rate 180
23x0# show security acl hits
ACL hit-counters
Index Counter ACL-name
----- -------------------- --------
1 31986 acl-red
2 0 acl-green
