display acl ipv6

Function

The display acl ipv6 command can view information about the rules of a specified ACL6 or of all ACL6s and packet matching statistics.

Format

display acl ipv6 { name acl6-name | all }

display acl ipv6 basic-acl6-number

display acl ipv6 advance-acl6-number

display acl ipv6 interface-based-acl6-number

display acl ipv6 ucl-acl6-number

Parameters

Parameter Description Value
name acl6-name

Specifies the name of an ACL6.

The value is a string of 1 to 64 case-sensitive characters, spaces not supported. The name must start with a letter or digit, and cannot contain only digits.

all

Displays information about all ACL6s.

-

basic-acl6-number

Specifies the number of an ACL6.

The value is an integer ranging from 2000 to 2999, the number of a basic ACL6 ranges from 2000 to 2999.

advance-acl6-number

Specifies the number of an ACL6.

The value is an integer ranging from 3000 to 3999, the number of an advanced ACL6 ranges from 3000 to 3999.

interface-based-acl6-number

Specifies the number of an ACL6.

The value is an integer ranging from 1000 to 1999, the number of an interface-based ACL6 ranges from 1000 to 1999.

ucl-acl6-number

Specifies the number of an ACL6.

The value is an integer ranging from 6000 to 9999, the number of a user ACL6 ranges from 6000 to 9999.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name Operations
acl read

Usage Guidelines

Usage Scenario

You can run the display acl ipv6 command for the following purposes:

  • To check details about a configured ACL6.
  • To check whether an ACL6 is deleted using the undo acl ipv6 command.
  • To check whether an ACL6 is referenced by a service and packet matching statistics.

Prerequisites

Historical statistics have been cleared using the reset acl ipv6 counter command.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display rule information and packet matching statistics of an ACL6 numbered 2200.
<HUAWEI> display acl ipv6 2200
Basic IPv6 ACL 2200, 1 rule, match-order is auto 
IPv6 ACL's step is 5
 rule 5 permit source 2001:DB8::/64 (0 times matched)
Table 1 Description of the display acl ipv6 command output
Item Description
Basic IPv6 ACL 2200, 1 rule

Type and number of the ACL6 and number of rules in the ACL6.

IPv6 ACL's step is 5

ACL6 step, which is 5 in this example.

rule 5 permit source 2001:DB8::/64

Detailed information about an ACL6 rule.

match-order is auto

ACL6 rule matching order.

There are two ACL6 rule-matching orders: configuration order (config) and automatic order (auto).

  • config: ACL6 rules are matched in the order they are configured.

    This mechanism applies only when rule numbers are not specified. If rule numbers are specified, the ACL6 rules are matched based on the numbers in ascending order.

  • auto: ACL6 rules are matched based on the depth-first principle.
    • The depth-first principle matches ACL6 rules based on how precise the rules are. The more matching criteria an ACL6 rule contains, the more precise the rule is.
    • If two rules have the same precision, they are matched in the order they are configured.
0 times matched

Number of times an ACL6 rule is matched.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >