Check the ACL resource usage on S series switches

3

Run the display acl resource [ slot <slot-id> ] command in any view on an S series switch to check the ACL resource usage.

Other related questions:
CE series switch ACL resources
For more information about CloudEngine Series Switches ACL Working Mechanism, click CloudEngine Series Switches ACL Working Mechanism.

How to check the resource usage of the DSP module of an AR router
You can check the resource usage of the DSP module of an AR router as follows: - In V200R002C00 and earlier versions Run the display voice dsp-dimm state { slot/dsp-index | channel slot/dsp-index/channel } command. Check the idle field in the displayed output information to determine whether there are remaining DSP resources. For example: display voice dsp-dimm state 15/0 Symbol: 0-idle $-G.711 busy A-All busy W-Wastage X-fault @-IP loopback *-PCM loopback #-prohibited Channel NO. DSP channel state ---------------------------------------------------------------------- 0000-0049 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 0050-0099 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 0100-0149 00000 00000 00000 00000 00000 000 Total: 128 DSP channel 128 idle, 0 G.711 Busy, 0 All Busy, 0 Wastage, 0 Fault, 0 IP loopback, 0 PCM loopback, 0 prohibited In the information above, the 128 idle message is displayed. It indicates that 128 DSP channels are idle, that is, DSP resources are sufficient currently. - In versions later than V200R002C00 Run the display voice dsp state { slot/dsp-index | channel slot/dsp-index/channel } command. Check the idle field in the displayed output information to determine whether DSP resources are left. For example: display voice dsp state 15/0 Symbol: 0-idle $-G.711 busy A-All busy W-Wastage X-fault @-IP loopback *-PCM loopback #-prohibited Channel NO. DSP channel state ---------------------------------------------------------------------- 0000-0049 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 0050-0099 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 0100-0149 00000 00000 00000 00000 00000 000 Total: 128 DSP channel 128 idle, 0 G.711 Busy, 0 All Busy, 0 Wastage, 0 Fault, 0 IP loopback, 0 PCM loopback, 0 prohibited In the information above, the 128 idle message is displayed. It indicates that 128 DSP channels are idle, that is, DSP resources are sufficient currently.

ACL configuration on S series switch
An ACL filters packets based on rules. A switch with an ACL configured matches packets based on the rules to obtain the packets of a certain type, and then decides to forward or discard these packets according to the policies used by the service module to which the ACL is applied. The S series switch supports basic ACL (2000-2999), advanced ACL (3000-3999), Layer 2 ACL (4000-4999), user-defined ACL (5000-5999), USER acl (6000-9999), basic ACL6 (2000-2999), and advanced ACL6 (3000-3999). For more information about the ACL feature supported by S series switches, except S1700, click S1720&S2700&S3700&S5700&S6700&S7700&S9700 Common Operation Guide or S1720&S2700&S3700&S5700&S6700&S7700&S9700 Typical Configuration Examples.

Check the number of times an ACL rule matches packets on an S series switch
Run the display acl { <acl-number> | name <acl-name> | all } command on an S series switch (except the S1700 switch) to check the configuration of an ACL.
In the command output, the match-counter field displays the number of times the ACL matches packets. To view the number of times the software-based ACL rule matches the packets, run the display acl command. To view the number of times the hardware-based ACL rule matches the packets, use other methods. For example, to view the number of times the ACL rule matches packets after a traffic policy is enforced, run the statistic enable command in the traffic behavior view to enable the traffic statistics collection in traffic behavior, and then run the display traffic policy statistics command.

View CPU usage and memory usage on s series switch
For S series switches except S1700 switches, you can run commands to display CPU and memory usage. - display cpu-usage [ slave | slot slot-id ]: displays CPU usage statistics. - display cpu-usage configuration [ slave | slot slot-id ]: displays CPU usage configuration. - display memory-usage [ slave | slot slot-id ]: displays memory usage statistics. - display memory-usage threshold [ slot slot-id ]: displays the alarm threshold for memory usage. For S series switches and E series switches except S1700 switches, you can check CPU and memory usage through the related MIB OIDs. - hwEntityCpuUsage 1.3.6.1.4.1.2011.5.25.31.1.1.1.1.5: provides CPU usage. - hwEntityCpuUsageThreshold 1.3.6.1.4.1.2011.5.25.31.1.1.1.1.6: provides the alarm threshold for CPU usage. - hwEntityMemUsage 1.3.6.1.4.1.2011.5.25.31.1.1.1.1.7: provides memory usage. - hwEntityMemUsageThreshold 1.3.6.1.4.1.2011.5.25.31.1.1.1.1.8: provides the alarm threshold for memory usage.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top