debugging acl

Function

The debugging acl command enables ACL debugging for quickly locating faults.

The undo debugging acl command disables ACL debugging.

By default, the debugging of ACL matching processing is disabled.

Format

debugging acl match-info number numberIntf [ max-count dbg-cnt ]

debugging acl match-info number numberMpls [ max-count dbg-cnt ]

debugging acl match-info number numberLink [ max-count dbg-cnt ]

debugging acl match-info number numberAdv [ max-count dbg-cnt ]

debugging acl match-info number numberBasic [ max-count dbg-cnt ]

debugging acl match-info name acl-name [ max-count dbg-cnt ]

undo debugging acl match-info number numberIntf

undo debugging acl match-info number numberMpls

undo debugging acl match-info number numberLink

undo debugging acl match-info number numberAdv

undo debugging acl match-info number numberBasic

undo debugging acl match-info name acl-name

Parameters

Parameter	Description	Value
max-count dbg-cnt	Specifies the maximum number of debugging information outputs.	The value is an integer ranging from 0 to 4294967295.
match-info	Debugs matching information about an ACL.	-
number numberBasic	Debugs the ACL with the specified number.	The value is an integer ranging from 2000 to 2999.
number numberIntf	Debugs the ACL with the specified number.	The value is an integer ranging from 1000 to 1999.
number numberAdv	Debugs the ACL with the specified number.	The value is an integer ranging from 3000 to 3999.
number numberLink	Debugs the ACL with the specified number.	The value is an integer ranging from 4000 to 4999.
number numberMpls	Debugs the ACL with the specified number.	The value is an integer ranging from 10000 to 10999.
name acl-name	Specifies the name of a named ACL for which debugging is to be enabled.	The value is a string of 1 to 64 case-sensitive characters, spaces not supported. The name must start with a letter or digit, and cannot contain only digits.

Views

User view

Default Level

3: Management level

Task Name and Operations

Task Name	Operations
acl	debug

Usage Guidelines

Usage Scenario

The debugging acl command enables ACL debugging and outputs debugging information for locating problems.

Example

# Enable ACL debugging of matching information about ACL rules.

<HUAWEI> debugging acl match-info number 2000
Jun 25 2012 04:54:29.364 HUAWEI %%01ACL/7/DEBUG(d):CID=0x80782754;[LDM match info:SrcIP(a7508a0a).]
Jun 25 2012 04:54:29.364 HUAWEI %%01ACL/7/DEBUG(d):CID=0x80782754;[LDM match rule:RuleID=5, Priority=5, Status=Active, ConditionNum=2, Result=ACL_DENY.]
Jun 25 2012 04:54:29.364 HUAWEI %%01ACL/7/DEBUG(d):CID=0x80782754;[LDM match result:uiRet=ACL_DENY, ruleID=5, groupId=1, vsid=0, VpnIndex=0.]

**Table 1** Description of the **debugging acl** command output
Item	Description
Jun 25 2012 04:54:29	Time when a debugging record is output.