display access trigger user-table slot

Function

The display access trigger user-table slot command displays information about users whose access packets are limited on a board.

This command is supported only on the NetEngine 8000 F1A.

Format

display access trigger user-table slot slot-id [ interface { interface-type interface-number | interface-name } ] [ mac-address mac-address | { ip-address ip-address | prefix prefix-address | ipv6-address ipv6-address } [ vpn-instance vpn-instance ] ]

Parameters

Parameter	Description	Value
interface interface-name	Specifies an interface name.	-
interface-type	Displays detailed information about users on a specified interface.	-
interface-number	Specifies the number of an interface.	-
mac-address mac-address	Displays detailed information about the user with a specified MAC address.	The value is a 12-digit hexadecimal number, in the format of H-H-H. Each H is 4 digits. If an H contains fewer than 4 digits, the left-most digits are padded with zeros. For example, e0 is displayed as 00e0.
ip-address ip-address	Displays detailed information about the user with a specified IPv4 address.	The value is a 32-bit hexadecimal number, in the format of X:X:X:X:X:X:X:X.
prefix prefix-address	Displays detailed information about the user with a specified IPv6 prefix.	The value is a 32-bit hexadecimal number, in the format of X:X:X:X:X:X:X:X.
ipv6-address ipv6-address	Displays detailed information about the user with a specified IPv6 address.	The value is a 32-bit hexadecimal number, in the format of X:X:X:X:X:X:X:X.
vpn-instance vpn-instance	Displays detailed information about the user with a specified VPN instance.	The value is an string ranging from 1 to 31.
slot slot-id	Displays information about users whose access packets are limited on the board in a specified slot.	-

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
bras-control	debug

Usage Guidelines

Usage Scenario

After the access trigger packet-limit command is run to configure a limit on the number of ARP/IP/IPv6/ND packets that can be sent to the main control board, you can run the display access trigger user-table command to check information about users whose access packets are limited.

Prerequisites

The access trigger packet-limit command has been run.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display restriction information about users on the board in slot 1. For static Layer 2 users, MAC addresses in the trigger table are all fs. For non-static users, MAC addresses of Layer 2 DHCP users are displayed as those of real users.

<HUAWEI> display access trigger user-table slot 1
-----------------------------------------------------------------------------------------------------------
Interface Vlan MAC IP/IPv6 address PassPkt DropPkt
-----------------------------------------------------------------------------------------------------------
GE0/1/1.1 200/100 00e0-fc12-3456 10.1.1.1 1 102
GE0/1/1.2 300/100 ffff-ffff-ffff 10.1.1.2 1 0
-----------------------------------------------------------------------------------------------------------

# Display information about the private network user whose access packets are limited with the IP address 1.1.1.1 on the board in slot 1.

<HUAWEI> display access trigger user-table slot 1 ip-address 1.1.1.1 vpn-instance hey
-------------------------------------------------------------------------------              

User Mac address       :xxxx-xxxx-xxxx  

Access Interface        :GigabitEthernet0/1/9.2

Access Pevlan/CeVlan   :100/-

User IP address         :1.1.1.1

Start Limit Time  : 2013-3-12 15:10:10

 Pass Packet(s)   :1000         

Drop Packet(s) : 4321 

---------------------------------------------------------------------------------

# Display information about the user whose access packets are limited with the IP address 1.1.1.1 on the board in slot 1.

<HUAWEI> display access trigger user-table slot 1 ip-address 1.1.1.1
-------------------------------------------------------------------------------              

User Mac address       : xxxx-xxxx-xxxx  

Access Interface        :GigabitEthernet0/1/9.1

Access Pevlan/CeVlan   :100/-

User IP address         :1.1.1.1

Start Limit Time  : 2013-3-12 15:10:10

Pass Packet(s)   :1000         

Drop Packet(s)  : 4321 

 -------------------------------------------------------------------------------

# Display information about the user whose access packets are limited with the MAC address 00e0-fc12-3456 on the board in slot 1.

<HUAWEI> display access trigger user-table slot 1 mac-address 00e0-fc12-3456
-------------------------------------------------------------------------------              
User Mac address       :   
Access Interface        :GigabitEthernet0/1/9.1
Access Pevlan/CeVlan   :100/-
IPV4:
User IP address         :1.1.1.1
Start Counting Time  : 2013-3-12 15:10:10
Pass Packet(s)    :500         
Drop Packet(s)   : 4321  

IPV6:
User IPV6 address      : 2001:db8::10
Start Counting Time  : 2013-3-12 15:10:10
Pass Packet(s)   :0         
Drop Packet(s)   : 0  
-------------------------------------------------------------------------------

**Table 1** Description of the **display access trigger user-table slot** command output
Item	Description
User Mac address	User's MAC address.
User IP address	User's IP address.
User IPV6 address	User's IPv6 address.
Access Interface	Interface through which a user goes online.
Access Pevlan/CeVlan	VLAN IDs of packets.
Start Counting Time	Start time when access packets are counted.
Start Limit Time	Start time when access packets are limited.
Pass Packet(s)	Number of packets sent to the main control board.
Drop Packet(s)	Number of discarded packets.
IPV6	Information of IPv6 users.
IPV4	Information of IPv4 users.