Enabling acl statistics – Brocade TurboIron 24X Series Configuration Guide User Manual

Page 971

Advertising
background image

Brocade TurboIron 24X Series Configuration Guide

937

53-1003053-01

ACL and rate limit counting

Enabling ACL statistics

NOTE

ACL statistics and ACL counting are used interchangeably throughout this chapter and mean the
same thing.

Use the procedures in this section to configure ACL statistics. Before configuring this feature, see
what to consider in

“Configuration notes and feature limitations”

on page 930.

You also can enable ACL statistics when you create a traffic policy for rate limiting. Refer to

“Enabling ACL statistics with rate limiting traffic policies”

on page 938.

Follow the steps given below to implement the ACL counting feature.

1. Create a traffic policy. Enter a command such as the following

TurboIron(config)#traffic-policy TPD5 count

2. Create an extended ACL entry or modify an existing extended ACL entry that references the

traffic policy definition.

Example

TurboIron(config)#access-list 101 permit ip host 10.10.12.2 any traffic-policy

TPD5

3. Bind the ACL to an interface.

TurboIron(config)#int e 4

TurboIron(config-if-e4)#ip access-group 101 in

TurboIron(config-if-e4)#exit

The above commands configure an ACL counting policy and apply it to port e4. Port e4 counts the
number of packets and the number of bytes on the port that were permitted or denied by ACL
filters.

Syntax: [no] traffic-policy <TPD name> count

Syntax: access-list <num> permit | deny.... traffic policy <TPD name>

Syntax: [no] ip access-group <num> in

NOTE

For brevity, some parameters were omitted from the above access-list syntax.

The software allows you to add a reference to a non-existent TPD in an ACL statement and to bind
that ACL to an interface. The software does not issue a warning or error message for non-existent
TPDs.

Use the no form of the command to delete a traffic policy definition. Note that you cannot delete a
traffic policy definition if it is currently in use on a port. To delete a traffic policy, first unbind the
associated ACL.

<TPD name> is the name of the traffic policy definition. This value can be 8 alphanumeric
characters or less.

Advertising