【H3C培训】ACL排障相关命令

　　display acl{ acl-number | all | name acl-name

　　该命令用来显示当前ACL的配置信息

　　display aclal

　　lAdvanced ACL 3004, named to-gss_permit, 18 rules,

　　ACL's step is 1

　　rule 0 permit ipsource 219.141.226.1 0 destination 219.141.226.2 0

　　rule 1 permit ipsource 219.141.136.10 0 destination 219.141.226.2 0

　　rule 2 permit ipsource 219.141.140.10 0 destination 219.141.226.2 0

　　rule 3 permit ipsource 21.1.116.18 0 destination 219.141.226.2 0

　　rule 4 permit ipsource 219.141.226.64 0.0.0.63 destination 219.141.226.2 0

　　rule 5 permit ipsource 219.141.226.128 0.0.0.127 destination 219.141.226.2 0

　　rule 6 permit ipsource 209.99.10.64 0.0.0.63 destination 219.141.226.2 0

　　rule 7 permit ipsource 209.99.10.128 0.0.0.127 destination 219.141.226.2 0

　　rule 8 permit icmpsource 202.108.189.12 0 destination 219.141.226.2 0

　　Advanced ACL 3014, named to-gss_deny, 1 rule,

　　ACL's step is

　　1rule 5 permit ip

 

　　display qospolicy interface

        该命令用来显示指定端口或所有端口上策略的配置信息和运行情况

　　　display qospolicy

　　interface Interface: Serial0/2/0

　　Direction: Inbound

　　Policy: filter

　　Classifier: permit

　　Matched : 0(Packets)

　　Operator: AND

　　Rule(s) : If-match acl3004

　　Behavior: permit

　　Filter Enable: permit

　　Classifier: deny

　　Matched : 0(Packets)

　　Operator: AND

　　Rule(s) : If-match acl3014

　　Behavior: deny

　　Filter Enable: deny

 

　　display firewall-statistics { all | interface interface-type interface-number | fragments-inspect }

       该命令用来查看防火墙的统计信息

　　display firewall-statistics all

　　Firewall is enable, default filtering method is 'deny'.

　　Interface: Serial0/0

　　In-bound Policy: acl 2001

　　Fragments matched normally

　　From 2008-11-17 10:33:46 to 2008-11-18 13:59:46

　　0 packets, 0 bytes, 0% permitted, 0 packets, 0 bytes, 0% denied,

　　0 packets, 0 bytes, 0% permitted default,

　　0 packets, 0 bytes, 0% denied default,

　　Totally 0 packets, 0 bytes, 0% permitted,

　　Totally 0 packets, 0 bytes, 0% denied.