最佳答案
您好,请知:
可通过dis acl all来查看所有ACL的命中次数。如果命中了,会在策略的最后方有(X time match)的命中次数显示。
(0)
#dis session table ipv4 source-ip 110.110.2.176 destination-ip 192.31.13.254 Initiator: Source IP/port: 110.110.2.176/8801 Destination IP/port: 192.31.13.254/9000 DS-Lite tunnel peer: - VPN instance/VLAN ID/Inline ID: -/-/- Protocol: TCP(6) Inbound interface: GigabitEthernet0/5 Initiator: Source IP/port: 110.110.2.176/1 Destination IP/port: 192.31.13.254/2048 DS-Lite tunnel peer: - VPN instance/VLAN ID/Inline ID: -/-/- Protocol: ICMP(1) Inbound interface: GigabitEthernet0/5
display acl xxxx查看是否(matchs)匹配次数,如果没有在配置acl时可以加上counting测试
(0)
dis session table ipv4 source-ip 10.110.2.176 destination-ip 192.31.13.254 Initiator: Source IP/port: 110.110.2.176/1 Destination IP/port: 192.31.13.254/2048 DS-Lite tunnel peer: - VPN instance/VLAN ID/Inline ID: -/-/- Protocol: ICMP(1) Inbound interface: GigabitEthernet0/5
dis session table ipv4 source-ip 10.110.2.176 destination-ip 192.31.13.254 Initiator: Source IP/port: 110.110.2.176/1 Destination IP/port: 192.31.13.254/2048 DS-Lite tunnel peer: - VPN instance/VLAN ID/Inline ID: -/-/- Protocol: ICMP(1) Inbound interface: GigabitEthernet0/5
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
#dis session table ipv4 source-ip 110.110.2.176 destination-ip 192.31.13.254 Initiator: Source IP/port: 110.110.2.176/8801 Destination IP/port: 192.31.13.254/9000 DS-Lite tunnel peer: - VPN instance/VLAN ID/Inline ID: -/-/- Protocol: TCP(6) Inbound interface: GigabitEthernet0/5 Initiator: Source IP/port: 110.110.2.176/1 Destination IP/port: 192.31.13.254/2048 DS-Lite tunnel peer: - VPN instance/VLAN ID/Inline ID: -/-/- Protocol: ICMP(1) Inbound interface: GigabitEthernet0/5