How to query the ACL hit count configured for the packet filtering firewall

1. Run the traffic classifier classifier-name command in the system view to create a traffic classifier and access the traffic classifier view. Run the if-match acl { acl-number | acl-name } command to configure rules for matching the traffic classifier.
2. Run the traffic behavior behavior-name command in the system view to create a traffic behavior and access the traffic behavior view. Run the statistic enable command to enable the traffic statistics function.
3. Run the traffic policy policy-name command in the system view to create a traffic policy and access the traffic policy view. Run the classifier classifier-name behavior behavior-name command to associate the traffic classifier with the behavior in the policy.
4. Run the traffic-policy policy-name inbound command in the interface view where count is needed.
5. Run the display traffic policy statistics interface interface-type interface-number inbound verbose rule-base command to query the ACL hit count configured for the packet filtering firewall on the interface.

Scroll to top