beautypg.com

Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) User Manual

Page 161

background image

Multi-Service IronWare Security Configuration Guide

143

53-1003035-02

IP broadcast ACL

3

Brocade(config-if-e1000-4/1)# show access-list subnet-broadcast accounting

ethernet 4/1

Subnet broadcast ACL 120

0: permit udp host 10.10.10.1 host 10.20.20.255

Hit count: (1 sec) 0 (1 min) 0

(5 min) 0 (accum) 0

1: permit tcp host 10.10.10.1 host 10.20.20.255

Hit count: (1 sec) 10 (1 min) 67

(5 min) 0 (accum) 67

2: deny ip any any

Hit count: (1 sec) 0 (1 min) 0

(5 min) 0 (accum) 0

Syntax: show access-list subnet-broadcast accounting [ethernet | ve] port-id or vid

The ethernet, and ve options specify the interfaces for which you can display the accounting
information. If you specify an Ethernet interface, you must also specify the port number associated
with the interface. If you specify a VE interface, you must specify the VE number associated with the
interface.

The port-id parameter specifies the port for which you want to display the accounting information.

The vid parameter specifies the VE interface ID.

Table 21

describes the output parameters of the show access-list subnet-broadcast accounting

command.

To display the accounting information for an IP broadcast ACL globally, enter the following
command.

Brocade# show access-list subnet-broadcast accounting global

Subnet broadcast ACL 12

0: permit enable-accounting host 10.1.103.217

Hit count: (1 sec) 2 (1 min) 150

(5 min) 0 (accum) 384

1: deny enable-accounting host 172.24.103.217

Hit count: (1 sec) 4 (1 min) 298

(5 min) 0 (accum) 764

2: permit enable-accounting host 10.100.103.217

Hit count: (1 sec) 10 (1 min) 600

(5 min) 0 (accum) 1540

TABLE 21

Output parameters of the show access-list subnet-broadcast accounting command

Field

Description

Subnet broadcast ACL ID The ID of the IP broadcast ACL.

#

The index of the IP broadcast ACL entry, starting with 0, followed by the permit or deny
condition defined for that ACL entry. (The first entry created for an ACL is assigned the
index 0. The index of the subsequent entries created are incremented by 1.)

permit udp host

The UDP packets are permitted from a specific source address to a specific destination
address.

permit tcp host

The TCP packets are permitted from a specific source address to a specific destination
address.

deny ip any

The IP packets are denied for all the host addresses.

Hit count

The number of hits for each counter.