display traffic policy not-support

Function

The display traffic policy not-support command displays the rules and actions that are not supported by a traffic policy on a specified board.

Format

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display traffic policy not-support policy policy-name slot slot-num inbound [ global-acl | vpn-acl | vsi-acl | vxlan-acl ]

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display traffic policy not-support policy policy-name slot slot-num inbound [ vpn-acl | vsi-acl | vxlan-acl ]

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display traffic policy not-support policy policy-name slot slot-num outbound [ global-acl | vxlan-acl ]

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display traffic policy not-support policy policy-name slot slot-num { inbound | outbound }

For NetEngine 8000 F1A:

display pupp policy not-support policy policy-name slot slot-num { inbound | outbound }

For NetEngine 8000 F1A, NetEngine 8000 F2A:

display traffic policy not-support policy policy-name slot slot-num { inbound | outbound } vsi-acl ac-mode

display traffic policy not-support policy policy-name slot slot-num { inbound | outbound } gre-tunnel

Parameters

Parameter	Description	Value
slot slot-num	Specifies a slot number.	The value range varies with device hardware.
inbound	Indicates upstream traffic.	-
global-acl	Indicates a global ACL.	-
vpn-acl	Indicates VPN-based MF classification.	-
vsi-acl	Indicates VSI-based MF classification.	-
vxlan-acl	Indicates a VXLAN ACL.	-
policy policy-name	Specifies a traffic policy name.	The value is a string of 1 to 127 characters.
outbound	Indicates downstream traffic.	-
pupp	Indicates the PUPP scenario. NOTE: This parameter is supported only on the NetEngine 8000 F1A.	-
ac-mode	Indicates the AC side.	-
gre-tunnel	Indicates the GRE tunnel.	-

Views

User view

Default Level

3: Management level

Task Name and Operations

Task Name	Operations
qos	debug

Usage Guidelines

Usage Scenario

To view the rules and actions that are not supported by a traffic policy on a specified board, run the display traffic policy not-support command.

To check the rules and actions that are not supported by a specified traffic policy on a specified board in the PUPP scenario, run the display pupp policy not-support command.

PUPP supports the following traffic behaviors: permit, deny, remark, match termination, and redirect ipv6 next-hop (Only forward policies are supported in the upstream direction).

PUPP does not support the following rules:

For IPv4 ACL: VPN-instance, TTL, and logging.
For IPv6 ACL: VPN-instance, packet priority, fragment, logging, hoport, ipv6-routing routing-type and ipv6-destination option-code.
After the command is executed, the output information is displayed in difference:
If both the rules and the behaviors are supported in the profile, no record is displayed in the output information.
If part of the rules and all the behaviors are supported in the profile, the classifier part displays record and the behavior part have no record.
If part of the behaviors and all the rules are supported in the profile, the behavior part displays record and the classifier part have no record.
If neither the rules nor the behaviors are supported in the profile, the classifier part and behavior part have records in the output information.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display the rules and actions that are not supported by the traffic-policy test on slot 1

<HUAWEI> display traffic policy not-support policy test slot 1 outbound
-------------------------------------------------------------------
Classifier test
if-match ipv6 acl 3000
rule 5 permit **** destination 100::101 F:F::E:E ****
Behavior test
   redirect vsi test 
-------------------------------------------------------------------
Classifier test
if-match acl 3000
    rule 10 permit **** vpn-instance 1 ****
Behavior test
    -
-------------------------------------------------------------------
Classifier test
-
Behavior test
    redirect vsi test
-------------------------------------------------------------------
  Classifier test
Behavior test
    ip netstream sampler except deny-action
-------------------------------------------------------------------

# Display actions not supported by GRE tunnel interfaces.

<HUAWEI> display traffic policy not-support policy test slot 1 inbound gre-tunnel
-------------------------------------------------------------------
Classifier test
Behavior test
   user-queue cir 1000 pir 1000
-------------------------------------------------------------------

# Display actions not supported by VSI ACLs.

<HUAWEI> display traffic policy not-support policy gina slot 1 inbound vsi-acl
-------------------------------------------------------------------
Classifier gina 
Behavior gina
  ip netstream sampler fix-packets 1 
-------------------------------------------------------------------

# Display actions not supported by VPN ACLs.

<HUAWEI> display traffic policy not-support policy gina slot 1 inbound vpn-acl
-------------------------------------------------------------------
Classfier gina
Behavior gina
ip netstream sampler fix-packets 1
-------------------------------------------------------------------

# Display the rules and actions that are not supported by the outbound traffic policy named test in the PUPP scenario.

<HUAWEI> display pupp policy not-support policy test slot 1 outbound
-------------------------------------------------------------------
PUPP does not support the following rules:
  traffic classifier operator and
  if-match non-acl rules
  if-match non-advance-acl rules
PUPP only support the following actions:
  permit/deny
  match termination
  remark(remark ip-df(inbound)/remark ttl(outbound))
  redirect ipv6 next-hop(weak policy-based routes(inbound))
-------------------------------------------------------------------

**Table 1** Description of the **display traffic policy not-support** command output
Item	Description
Behavior	Traffic behavior name.
Classfier	Traffic classifier name.