ACL

nv show acl

Shows the configured ACL rules on the switch.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl
          type  Summary 
--------  ----  --------
EXAMPLE1  ipv4  rule: 10

nv show acl <acl-id>

Shows the specified ACL configuration.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1
      operational  applied
----  -----------  -------
type               ipv4

rule
=======

nv show acl <acl-id> rule

Shows the rules for the specified ACL.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule
Number  Summary                         
------  --------------------------------
10      match.ip.dest-ip:   10.0.15.8/32
        match.ip.dest-port:          ANY
        match.ip.protocol:           tcp
        match.ip.source-ip: 10.0.14.2/32
        match.ip.source-port:        ANY

nv show acl <acl-id> rule <rule-id>

Shows configuration information about the ACL with the specified rule number.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10
                   operational   applied     
-----------------  ------------  ------------
match                                        
  ip                                         
    dest-ip        10.0.15.8/32  10.0.15.8/32
    protocol       tcp           tcp         
    source-ip      10.0.14.2/32  10.0.14.2/32
    [dest-port]    ANY           ANY         
    [source-port]  ANY           ANY

nv show acl <acl-id> rule <rule-id> action

Shows the action for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 action
  operational  applied
  -----------  -------
               permit

nv show acl <acl-id> rule <rule-id> action deny

Shows the deny action for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 action deny

nv show acl <acl-id> rule <rule-id> action erspan

Shows the ERSPAN session for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 action erspan
     operational  applied  pending
---  -----------  -------  -------
ttl                        200

nv show acl <acl-id> rule <rule-id> action log

Shows logs for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 action log

nv show acl <acl-id> rule <rule-id> action permit

Shows the permit action for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 action permit

nv show acl <acl-id> rule <rule-id> action police

Shows policing of matched packets and bytes for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The ACL rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 action police

nv show acl <acl-id> rule <rule-id> action set

Shows the set action for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 action set

nv show acl <acl-id> rule <rule-id> match

Shows the ACL match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match

nv show acl <acl-id> rule <rule-id> match ip

Shows the IPv4 or IPv6 match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip
             operational  applied
-----------  -----------  -------
protocol                  tcp    
[dest-port]               200

nv show acl <acl-id> rule <rule-id> match ip dest-port

Shows destination port match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip dest-port
Ports
-----
ANY

nv show acl <acl-id> rule <rule-id> match ip dest-port <ip-port-id>

Shows destination port match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.
`<ip-port-id>`	The IP port number or protocol.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip dest-port http

nv show acl <acl-id> rule <rule-id> match ip ecn

Shows ECN match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.2.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip ecn

nv show acl <acl-id> rule <rule-id> match ip ecn flags

Shows the ECN protocol flag match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.2.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip ecn flags
 operational  applied
  -----------  -------
               tcp-cwr
               tcp-ece
               tcp-cwr
               tcp-ece

nv show acl <acl-id> rule <rule-id> match ip fragment

Shows ip fragment packet match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip fragment

nv show acl <acl-id> rule <rule-id> match ip source-port

Shows the source port match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip source-port ANY

nv show acl <acl-id> rule <rule-id> match ip source-port <ip-port-id>

Shows the match criteria for a specific port for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.
`<ip-port-id>`	The IP port number or protocol.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip source-port ANY

nv show acl <acl-id> rule <rule-id> match ip tcp

Shows TCP match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip tcp

nv show acl <acl-id> rule <rule-id> match ip tcp flags

Shows TCP flag match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip tcp flags

nv show acl <acl-id> rule <rule-id> match ip tcp mask

Shows TCP protocol flag mask match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match ip tcp mask

nv show acl <acl-id> rule <rule-id> match mac

Shows MAC address match criteria for the specified ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show acl EXAMPLE1 rule 10 match mac

nv show interface <interface-id> acl

Shows the ACLs on the specified interface. You use ACLs to match packets and take actions.

Command Syntax

Syntax	Description
`<interface-id>`	The interface on which the ACL operates.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show interface swp1 acl
ACL Name  Rule ID  In Packets  In Bytes  Out Packets  Out Bytes
--------  -------  ----------  --------  -----------  ---------
EXAMPLE1  10                             0            0

nv show interface <interface-id> acl <acl-id>

Shows information about a specific ACL on the specified interface. You use ACLs to match packets and take actions.

Command Syntax

Syntax	Description
`<interface-id>`	The interface on which the ACL operates.
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show interface swp1 acl EXAMPLE1
Statistics
=============
    Rule  In Packet  In Byte  Out Packet  Out Byte  Summary                
    ----  ---------  -------  ----------  --------  -----------------------
    10                        0           0 Bytes   match.ip.dest-port: 200
                                                    match.ip.protocol:  tcp

nv show interface <interface-id> acl <acl-id> inbound

Shows information about the ACL applied for inbound traffic on the specified interface.

Command Syntax

Syntax	Description
`<interface-id>`	The interface on which the ACL operates.
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show interface swp1 acl EXAMPLE1 inbound

nv show interface <interface-id> acl <acl-id> inbound control-plane

Shows information about the ACL applied for the control plane on the specified interface.

Command Syntax

Syntax	Description
`<interface-id>`	The interface on which the ACL operates.
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show interface swp1 acl EXAMPLE1 inbound control-plane

nv show interface <interface-id> acl <acl-id> outbound

Shows information about the ACL applied for outbound traffic on the specified interface.

Command Syntax

Syntax	Description
`<interface-id>`	The interface on which the ACL operates.
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show interface swp1 acl EXAMPLE1 outbound

nv show interface <interface-id> acl <acl-id> outbound control-plane

Shows information about the ACL applied to the control plane for outbound traffic on the specified interface.

Command Syntax

Syntax	Description
`<interface-id>`	The interface on which the ACL operates.
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show interface swp1 acl EXAMPLE1 outbound control-plane

nv show interface <interface-id> acl <acl-id> statistics

Shows statistics for a specific ACL on the specified interface.

Command Syntax

Syntax	Description
`<interface-id>`	The interface on which the ACL operates.
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.2.0

Example

cumulus@switch:~$ nv show interface swp1 acl EXAMPLE1 statistics
Rule  In Packet  In Byte  Out Packet  Out Byte  Summary                
----  ---------  -------  ----------  --------  -----------------------
10                        0           0 Bytes   match.ip.dest-port: 200
                                                match.ip.protocol:  tcp

nv show interface <interface-id> acl <acl-id> statistics <rule-id>

Shows statistics for a specific ACL rule on the specified interface.

Command Syntax

Syntax	Description
`<interface-id>`	The interface on which the ACL operates.
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.2.0

Example

cumulus@switch:~$ nv show interface swp1 acl EXAMPLE1 statistics 10
                 operational  applied
---------------  -----------  -------
match                                
  ip                                 
    protocol     tcp                 
    [dest-port]  200                 
outbound                             
  byte           0 Bytes             
  packet         0

nv show system acl

Shows the ACL mode setting; atomic or non-atomic

Version History

Introduced in Cumulus Linux 5.3.0

Example

cumulus@switch:~$ nv show system acl
      applied
----  -------
mode  atomic

nv show system control-plane

Shows the control plane configuration.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show system control-plane

nv show system control-plane acl

Shows the control plane ACLs configured on the switch. You use control plane ACLs to apply a single rule for all packets forwarded to the CPU regardless of the source interface or destination interface on the switch. Control plane ACLs allow you to regulate traffic forwarded to applications on the switch with more granularity than traps and to configure ACLs to block SSH from specific addresses or subnets.

Version History

Introduced in Cumulus Linux 5.5.0

Example

cumulus@switch:~$ nv show system control-plane acl
ACL Name   Rule ID  In Packets  In Bytes  Out Packets  Out Bytes
---------  -------  ----------  --------  -----------  ---------
acl1       1        0           0         0            0
           65535    0           0         0            0
acl2       1        0           0         0            0
           65535    0           0         0            0

nv show system control-plane acl <acl-id>

Shows information about the specified control plane ACL.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.5.0

Example

cumulus@switch:~$ nv show system control-plane acl ACL1

nv show system control-plane acl <acl-id> statistics

Shows statistics for the specified control plane ACL.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.

Version History

Introduced in Cumulus Linux 5.5.0

Example

cumulus@switch:~$ nv show system control-plane acl ACL1 statistics
Rule  In Packet  In Byte  Out Packet  Out Byte  Summary 

----  ---------  -------  ----------  --------  --------------------------- 

1     0          0 Bytes  0           0 Bytes   match.ip.dest-ip:   9.1.2.3 

2     0          0 Bytes  0           0 Bytes   match.ip.source-ip: 7.8.2.3

nv show system control-plane acl <acl-id> statistics <rule-id>

Shows statistics for the specified control plane ACL rule.

Command Syntax

Syntax	Description
`<acl-id>`	The ACL name.
`<rule-id>`	The rule number.

Version History

Introduced in Cumulus Linux 5.5.0

Example

cumulus@switch:~$ nv show system control-plane acl ACL1 statistics 10

nv show system control-plane policer

Shows control plane policer configuration.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show system control-plane policer

nv show system control-plane policer <policer-id>

Shows configuration information for a specific control plane policer.

Command Syntax

Syntax	Description
`<policer-id>`	The policer ID: `arp`, `bfd`, `pim-ospf-rip`, `bgp`, `clag`, `icmp-def`, `dhcp-ptp`, `igmp`, `ssh`, `icmp6-neigh`, `icmp6-def-mld`, `lacp`, `lldp`, `rpvst`, `eapol`, `ip2me`, `acl-log`, `nat`, `stp`, `l3-local`, `span-cpu`, `unknown-ipmc`, `catch-all`.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show system control-plane policer bfd

nv show system control-plane policer <policer-id> statistics

Shows statistics for a specific control plane policer.

Command Syntax

Syntax	Description
`<policer-id>`	The policer ID: `arp`, `bfd`, `pim-ospf-rip`, `bgp`, `clag`, `icmp-def`, `dhcp-ptp`, `igmp`, `ssh`, `icmp6-neigh`, `icmp6-def-mld`, `lacp`, `lldp`, `rpvst`, `eapol`, `ip2me`, `acl-log`, `nat`, `stp`, `l3-local`, `span-cpu`, `unknown-ipmc`, `catch-all`.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show system control-plane policer bfd statistics

nv show system control-plane trap

Shows the control plane trap configuration.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show system control-plane trap

nv show system control-plane trap <trap-id>

Shows specific control plane trap configuration.

Command Syntax

Syntax	Description
`<trap-id>`	The trap ID.

Version History

Introduced in Cumulus Linux 5.0.0

Example

cumulus@switch:~$ nv show system control-plane trap l3-mtu-err