ASR9k - ACL Counters

[amit.bhagat]

Hi All,

Apologies if this has already been asked but I want to know if there is a way to view access-list counters when it is used in a class-map and the policy-map is applied to an interface.

I tried the following command but I get "unrecognized location".

RP/0/RSP0/CPU0:R1# show access-lists ipv4 ACL-NETWORK-CONTROL-00001 hardware egress location 0/0/1
Tue Jul  1 01:24:20.077 UTC
Unrecognized location

RP/0/RSP0/CPU0:R1# show platform
Tue Jul  1 01:32:32.358 UTC
Node            Type                      State            Config State
-----------------------------------------------------------------------------
0/RSP0/CPU0     ASR9001-RP(Active)        IOS XR RUN       PWR,NSHUT,MON
0/0/CPU0        ASR9001-LC                IOS XR RUN       PWR,NSHUT,MON
0/0/0           A9K-MPA-20X1GE            OK               PWR,NSHUT,MON
0/0/1           A9K-MPA-4X10GE            OK               PWR,NSHUT,MON

IOS-XR version 4.2.3 on ASR9001.

Regards,

Amit.

[bhnegi]

Hi Amit,

Since you are using access-list in a  service policy applied to an interface.

Are you not seeing matches when you do "show policy-map interface g0/0/1/x in/out ?

In order to see the "show access-list" output you have to apply the acl in/out to the interface.

Best Regards,

Bheem

[skondala]

try this command and see if it works...

show access-lists ipv4 ACL-NETWORK-CONTROL-00001 hardware egress location 0/0/CPU0

[s.mohammedabdulhafiz]

Hi Amit,

Please share the interface configuration. If access group configured in interface, use below command format.

To display the hardware counters for a given access group, use the show access-lists ipv4 [access-list-name hardware {ingress | egress} [interface type interface-path-id] {location node-id}] command in EXEC mode.

Regards,

S Mohammed Abdul Hafiz