ACL Operational Commands

ACL Show Commands

Syntax:

show acl <option>

Option Description

-

Without any option, this command displays brief information about the access control list (ACL).

all

Displays all ACL information.

show acl all count

Displays the count of all ACL rules.

show acl all detail

Displays detailed information for all ACLs.

show acl all rule <acl-name>

Displays detailed information for the specified ACL rule name.

show acl all rule statistics

Displays ACL statistics information for all ACL rules.

count

Displays the count of ACL rules.

detail

Displays detailed information about the access-control list (ACL).

type <acl_type>

Displays detailed information for the specified ACL type.

rule <acl-rule-name>

Displays detailed information for the specified ACL rule name.

ordinal <ordinal>

Displays detailed information for the specified Ordinal.

type <acl_type> rule <rule_name>

Displays detailed information for the specified ACL Type and Rule name.

type <acl_type> ordinal <ordinal>

Displays detailed information for the specified ACL Type and Ordinal.

rule <rule_name> type <acl_type>

Displays detailed information for the specified ACL Type and Rule name.

rule <rule_name> ordinal <ordinal>

Displays detailed information for the specified Rule name and Ordinal.

ordinal <ordinal> type <acl_type>

Displays detailed information for the specified ACL type and ordinal.

ordinal <ordinal> rule <rule_name>

Displays detailed information for the specified rule name and ordinal.

type <acl_type> rule <rule_name> ordinal <ordinal>

Displays detailed information for the specified Ordinal, ACL type and rule name.

type <acl_type> ordinal <ordinal> rule <rule_name>

Displays detailed information for the specified Ordinal, ACL type and rule name.

rule <rule_name> ordinal <ordinal> type <acl_type>

Displays detailed information for the specified Ordinal, ACL type and rule name.

rule <rule_name> type <acl_type> ordinal <ordinal>

Displays detailed information for the specified Ordinal, ACL type and rule name.

ordinal <ordinal> rule <rule_name> type <acl_type>

Displays detailed information for the specified Ordinal, ACL type and rule name.

ordinal <ordinal> type <acl_type> rule <rule_name>

Displays detailed information for the specified Ordinal, ACL type and rule name.

Example 1: Show information about ACLs

supervisor@rtbrick: op> show acl | head -n 10
ACL                                      Ordinal  Type                Attach Point     Priority   Policer Name
_DEFAULT_MTU_POLICER_TRAP_ACL                  -  l2                  recycle-0/0/211         1   _DEFAULT_POLICER_20_MB
recycle-0/0/215_bypass_acl                     -  l2                  recycle-0/0/215         2   -
lldp.ifp-0/1/12.trap.rule.0                    -  l2                  ifp-0/1/12             50   _DEFAULT_POLICER_LLDP_GLOBAL_10MB
lldp.ifp-0/1/12.trap.rule.1                    -  l2                  ifp-0/1/12             50   _DEFAULT_POLICER_LLDP_GLOBAL_10MB
lldp.ifp-0/1/12.trap.rule.2                    -  l2                  ifp-0/1/12             50   _DEFAULT_POLICER_LLDP_GLOBAL_10MB
lldp.ifp-0/1/32.trap.rule.0                    -  l2                  ifp-0/1/32             50   _DEFAULT_POLICER_LLDP_GLOBAL_10MB
lldp.ifp-0/1/32.trap.rule.1                    -  l2                  ifp-0/1/32             50   _DEFAULT_POLICER_LLDP_GLOBAL_10MB
lldp.ifp-0/1/32.trap.rule.2                    -  l2                  ifp-0/1/32             50   _DEFAULT_POLICER_LLDP_GLOBAL_10MB
lldp.ifp-0/1/24.trap.rule.0                    -  l2                  ifp-0/1/24             50   _DEFAULT_POLICER_LLDP_GLOBAL_10MB

Example 2: Show detailed information about ACLs

supervisor@rtbrick: op> show acl detail | head -n 10
Rule: _DEFAULT_MTU_POLICER_TRAP_ACL
  ACL type: l2
  Ordinal: -             Priority: 1
    Match:
      Attachment point: recycle-0/0/211
      Direction: ingress
      Physical Interface: recycle-0/0/211
    Action:
      Redirect to CPU: True
      Policer profile name: _DEFAULT_POLICER_20_MB

Example 3: Show detailed information for a specified ACL Rule

supervisor@rtbrick: op> show acl rule DROP_VIDEO_PKTS
Rule: DROP_VIDEO_PKTS
  ACL type: ext_l3v4
  Ordinal: 1             Priority: 500
    Match:
      Direction: external
      Destination IPv4 prefix: 192.0.2.54/32
    Action:
      Stats enabled: True
    Result:
      Trap ID: user-defined
      ACL Handle: 4
      External:
        Value: 2763663
          Is Trap ID: Yes
          Trap ID: 199
          Trap Strength: 5
          Is QoS: Yes
          Class: 0
          Policer ID: 21

Example 4: Show detailed information for a specified ACL Type and Rule name

supervisor@rtbrick: op> show acl all
ACL                                      Ordinal  Type                Attach Point     Priority   Policer Name                       Acl Handle
radius-srv1-v4-coa-trap                        -  ext_l3v4            -                      50   _DEFAULT_POLICER_RADIUS_GLOBAL_...          5
radius-srv1-v4-acct-trap                       -  ext_l3v4            -                      50   _DEFAULT_POLICER_RADIUS_GLOBAL_...          4
mpls.oam.destination.ipv4.trap.rule            -  ext_l3v4            -                      50   _DEFAULT_POLICER_OAM_GLOBAL_20MB            1
radius-srv1-v4-auth-trap                       -  ext_l3v4            -                      50   _DEFAULT_POLICER_RADIUS_GLOBAL_...          3
mpls.oam.source.ipv4.trap.rule                 -  ext_l3v4            -                      50   _DEFAULT_POLICER_OAM_GLOBAL_20MB            2
_DEFAULT_MTU_POLICER_TRAP_ACL                  -  l2                  recycle-0/0/211         1   _DEFAULT_POLICER_20_MB                     26
l2x_xconnect_mpls_port_wide_lif_data_acl      10  l2                  -                       2   -                                          13
arp_acl_sc_double_tag                          -  l2                  -                       4   _DEFAULT_POLICER_ARP_GLOBAL_10MB           24
arp_acl_s_single_tag                           -  l2                  -                       4   _DEFAULT_POLICER_ARP_GLOBAL_10MB           25
arp_acl_single_tag                             -  l2                  -                       4   _DEFAULT_POLICER_ARP_GLOBAL_10MB           22
arp_acl_double_tag                             -  l2                  -                       4   _DEFAULT_POLICER_ARP_GLOBAL_10MB           23
arp_acl_untag                                  -  l2                  -                       4   _DEFAULT_POLICER_ARP_GLOBAL_10MB           21
lldp.ifp-0/1/31.trap.rule                      0  l2                  ifp-0/1/31             50

<...>

Example 5: Show the count of all ACL rules

supervisor@rtbrick: op> show acl all count
ACL count
  ext_l3v4                  : 5
  l2                        : 55
  PPPOE                     : 8
  service_rule              : 4
  ext_l3v6                  : 7
  l2tp_cross_connect        : 1
  l2tp_options              : 1
  Total-count               : 81

ACL Statistics Commands

ACL statistics are currently not supported for PIM, IGMP, and L2TP protocol traffic.

Syntax:

show acl <option> statistics

Option Description

statistics

Displays ACL statistics information

<acl-name> statistics

Displays ACL statistics information for the specified ACL.

type <acl_type> statistics

Displays ACL statistics information for the specified ACL type.

rule <rule_name> statistics

Displays ACL statistics information for the specified rule name.

ordinal <ordinal> statistics

Displays ACL statistics information for the specified ordinal.

type <acl_type> rule <rule_name> statistics

Displays ACL statistics information for the specified ACL type and rule name.

type <acl_type> ordinal <ordinal> statistics

Displays ACL statistics information for the specified ACL type and ordinal.

rule <rule_name> type <acl_type> statistics

Displays ACL statistics information for the specified ACL type and rule name.

rule <rule_name> ordinal <ordinal> statistics

Displays ACL statistics information for the specified rule name and ordinal.

ordinal <ordinal> type <acl_type> statistics

Displays ACL statistics information for the specified ACL type and ordinal.

ordinal <ordinal> rule <rule_name> statistics

Displays ACL statistics information for the specified rule name and ordinal.

<acl_type> rule <rule_name> ordinal <ordinal> statistics

Displays ACL statistics information for the specified ordinal, ACL type and rule name.

type <acl_type> ordinal <ordinal> rule <rule_name> statistics

Displays ACL statistics information for the specified ordinal, ACL type and rule name.

rule <rule_name> ordinal <ordinal> type <acl_type> statistics

Displays ACL statistics information for the specified ordinal, ACL type and rule name.

rule <rule_name> type <acl_type> ordinal <ordinal> statistics

Displays ACL statistics information for the specified ordinal, ACL type and rule name.

ordinal <ordinal> rule <rule_name> type <acl_type> statistics

Displays ACL statistics information for the specified ordinal, ACL type and rule name.

ordinal <ordinal> type <acl_type> rule <rule_name> statistics

Displays ACL statistics information for the specified ordinal, ACL type and rule name.

Example 1: Display ACL statistics information

supervisor@rtbrick: op> show acl statistics |head -n 10
ACL                                        Ordinal    Type              Units      Total       Accepted    Dropped
lldp.ifp-0/1/12.trap.rule.0                -          l2                Packets    59          59          0
                                                                        Bytes      7316        7316        0
lldp.ifp-0/1/12.trap.rule.1                -          l2                Packets    59          59          0
                                                                        Bytes      7316        7316        0
lldp.ifp-0/1/12.trap.rule.2                -          l2                Packets    59          59          0
                                                                        Bytes      7316        7316        0
lldp.ifp-0/1/32.trap.rule.0                -          l2                Packets    59          59          0
                                                                        Bytes      7316        7316        0
lldp.ifp-0/1/32.trap.rule.1                -          l2                Packets    59          59          0

Example 2: Display ACL statistics information for the specified ACL

supervisor@rtbrick: op> show acl rule DROP_VIDEO_PKTS statistics
ACL                                        Ordinal    Type              Units      Total       Accepted    Dropped
DROP_VIDEO_PKTS                            1          ext_l3v4          Packets    100         0           100
                                                                        Bytes      9200        0           9200

Show Trap Commands

A trap refers to a mechanism where specific packets or traffic conditions are intercepted (or “trapped”) by the system—typically from the data plane to the control plane—for further processing. It provides visibility into how traffic is handled by the system. It includes both forwarded and dropped packet statistics, helping operators analyze traffic behavior to identify anomalies.

Syntax:

show trap <option>

Option Description

trap_name

Specifies the name of the trap. Displays detailed information about a specific trap, including its configuration, state, and associated parameters.

statistics

Displays statistical information for all traps, such as the number of traps generated, sent, or failed.

Example for trap statistics of RPF.

supervisor@rtbrick.net: cfg> show trap statistics rpf
Trap Statistics Type: rpf
    Statistics ID: 1
    Counters:
        Forward-Packets: 0
        Forward-Bytes: 0
        Drop-Packets: 1550
        Drop-Bytes: 2194800

Example for trap statistics of NAT.

supervisor@rtbrick.net: cfg> show trap statistics nat
Trap Statistics Type: nat
    Statistics ID: 524
    Counters:
        Forward-Packets: 20943738
        Forward-Bytes: 29405223462
        Drop-Packets: 38998908
        Drop-Bytes: 54754548576

ACL Clear Commands

Clear commands allow resetting operational states.

Clear ACL Statistics

Syntax:

clear acl <options>

Option Description

statistics

Clears all the ACL statistics.

type <acl_type> statistics

Clears all ACL statistics for the specified ACL type

rule <rule_name> statistics

Clears all ACL statistics for the specified rule

ordinal <ordinal> statistics

Clears all ACL statistics for the specified ordinal

type <acl_type> rule <rule_name> statistics

Clears all ACL statistics for the specified ACL type and rule

type <acl_type> ordinal <ordinal> statistics

Clears all ACL statistics for the specified ACL type and ordinal

rule <rule_name> type <acl_type> statistics

Clears all ACL statistics for the specified ACL type and rule

rule <rule_name> ordinal <ordinal> statistics

Clears all ACL statistics for the specified rule and ordinal

ordinal <ordinal> type <acl_type> statistics

Clears all ACL statistics for the specified ACL Type and Ordinal

ordinal <ordinal> rule <rule_name> statistics

Clears all ACL statistics for the specified Rule name and Ordinal

type <acl_type> rule <rule_name> ordinal <ordinal> statistics

Clears all ACL statistics for the specified Ordinal, ACL Type and Rule name

type <acl_type> ordinal <ordinal> rule <rule_name> statistics

Clears all ACL statistics for the specified Ordinal, ACL Type and Rule name

rule <rule_name> ordinal <ordinal> type <acl_type> statistics

Clears all ACL statistics for the specified Ordinal, ACL Type and Rule name

rule <rule_name> type <acl_type> ordinal <ordinal> statistics

Clears all ACL statistics for the specified Ordinal, ACL Type and Rule name

ordinal <ordinal> rule <rule_name> type <acl_type> statistics

Clears all ACL statistics for the specified Ordinal, ACL Type and Rule name

ordinal <ordinal> type <acl_type> rule <rule_name> statistics

Clears all ACL statistics for the specified Ordinal, ACL Type and Rule name

Example: Clearing ACL Statistics of a specified ACL Rule

supervisor@rtbrick>LEAF01: op> clear acl rule lldp.ifp-0/0/44.trap.rule statistics
Success : command success
supervisor@rtbrick>LEAF01: op>

Clear Trap Statistics

This command clears the accumulated statistics for all traps.

Syntax:

clear trap statistics

Example:

clear trap statistics rpf
supervisor@rtbrick.net: cfg> clear trap statistics rpf
Success : command success