Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All
     

    Related Documentation

     

    Monitoring the Policy Configuration of IP Interfaces

    Purpose

    Display information about an IP interface (including policy list statistics).

    Action

    To display information about IP policy lists on ATM interfaces:

    Note: When the classifier-specific statistics accounting feature is enabled for a classifier group, the sum of IP and user payload header bytes excluding control overhead header bytes is sent to AAA for service accounting. The bytes fields under the classifier-group field in IP policy input and output sections always display the number of bytes as a sum of IP header, user payload, and control overheads without depending on the status of the classifier-specific statistics accounting feature. For more information about the classifier-specific statistics accounting feature, see Classifier-Specific Statistics Accounting for Classifier Groups Overview.

    Note: When a parity error is detected for policy accounting statistics and the router is enabled to perform actions after parity error detection, an error message is displayed for those subscriber policies instead of the corrupted statistics details. For more information about the parity error check mechanism and system operations on detecting corruption, see Detection of Corruption in the Statistics FPGA and System Operations on Detecting Corruption.

    host1#show ip interface atm 11/0.6
    
    ATM11/0.6 line protocol Atm1483 is down, ip is down (ready)
      Network Protocols: IP
      Internet address is 10.12.1.1/255.255.255.0
      Broadcast address is 255.255.255.255
      Operational MTU = 0  Administrative MTU = 0
      Operational speed = 100000000  Administrative speed = 0
      Discontinuity Time = 0
      Router advertisement = disabled
      Proxy Arp = disabled
      ARP spoof checking = enabled
      Network Address Translation is disabled
      TCP MSS Adjustment = disabled
      Administrative debounce-time = disabled 
      Operational debounce-time    = disabled 
      Access routing = disabled 
      Multipath mode = hashed
      Auto Configure = disabled
      Auto Detect = disabled
      Re-Authenticate Auto Detect = disabled
      Inactivity Timer = disabled
      Use Framed Routes = disabled
      Warm-restart initial-sequence-preference: Operational = 0 Administrative = 0
    
      In Received Packets 0, Bytes 0
        Unicast Packets 0, Bytes 0
        Multicast Packets 0, Bytes 0
      In Policed Packets 0, Bytes 0
      In Error Packets 0
      In Invalid Source Address Packets 0
      In Discarded Packets 0
      Out Forwarded Packets 0, Bytes 0
        Unicast Packets 0, Bytes 0
        Multicast Routed Packets 0, Bytes 0
      Out Scheduler Dropped Packets 0, Bytes 0
      Out Policed Packets 0, Bytes 0
      Out Discarded Packets 0
    
      IP policy output testPol
        classifier-group *
          0 packets, 0 bytes
          forward
          aaa count enable
             Virtual-router: default
             List:
               interface ATM11/0.1, order 100, rule 2 (not supported in output
               policy)
               next-hop 1.1.1.1, order 100, rule 3 (active) (not supported in
               output policy)
          rate-limit-profile R2
            committed rate: 0 bps, committed burst: 0 bytes (default)
            peak rate: 0 bps, peak burst: 0 bytes (default)
            committed: 0 packets, 0 bytes, action: transmit conditional
            conformed: 0 packets, 0 bytes, action: transmit conditional
            exceeded:  0 packets, 0 bytes, action: drop
          log
        classifier-group video entry 1
          0 packets, 0 bytes
          filter

    To display information about IP policy lists on tunnel interfaces:

    Note: If you enable scheduler profile–based computation of service session accounting by using the service-accounting- statistics scheduler-based command, the forwarded packets and bytes fields, and the dropped packets and bytes fields are displayed in the rate-limit-profile section under the IP policy output heading for policies with hierarchical parent groups. The committed, conformed, exceeded, saturated, and unconditional packets and bytes fields are not displayed in the rate-limit-profile section in the output of the command for policies with hierarchical parent groups. These fields are displayed instead of the forwarded packets and bytes fields, and the dropped packets and bytes fields only if you disable scheduler profile-based computation of service session accounting.

    Note: The packets field in the IP policy output section displays the number of fragments or packets sent out from the tunnel interface for which an output policy is attached, depending on whether you enabled preservation of output policy statistics using the enable-frag-stats command. Although this field displays the unit of measure as packets, it denotes the number of fragments if statistics generation for output policies based on fragments is enabled. Otherwise, this field indicates the number of output policed packets on the tunnel interface.

    host1#show ip interface tunnel l2tp:1/19/21
    
    Out Forwarded Packets 1, Bytes 1500
        Unicast Packets 1, Bytes 1500
        Multicast Routed Packets 0, Bytes 0
      Out Scheduler Dropped Packets 0, Bytes 0
      Out Policed Packets 0, Bytes 0
      Out Discarded Packets 0
    
      IP policy output POLICY-USER-OUT
        classifier-group USER-OUT-PERMIT entry 1
          2 packets, 1596 bytes 
          forward
      queue 0: traffic class best-effort, bound to ip TUNNEL l2tp:1/19/21
        Queue length 0 bytes
        Forwarded packets 2, bytes 1590
    
    

    Meaning

    Table 1 lists the show ip interfaces command output fields.

    Table 1: show ip interfaces Output Fields

    Field Name

    Field Description

    Network Protocols

    Protocols configured on the interface

    Internet address

    IP address of the interface

    Broadcast address

    Broadcast address used by the interface

    Operational MTU

    Operational maximum transmission unit (MTU) for packets sent on this interface

    Administrative MTU

    Administrative maximum transmission unit for packets sent on this interface

    Operational speed

    Speed known to the IP layer in bits per second; equal to the administrative speed if configured, otherwise inherited from the lower layer

    Administrative speed

    Configured speed known to the IP layer in bits per second

    Discontinuity Time

    Time since the counters on the interface became invalid; for example, when the line module was reset

    Router Advertisement

    When enabled by the ip irdp command, the router advertises its presence via the ICMP Router Discovery Protocol (IRDP)

    Administrative debounce-time

    Administrative time delay that an interface must remain in a new state before the routing protocols react to the state change

    Operational debounce-time

    Time delay that an interface must remain in a new state before the routing protocols react to the state change

    Access routing

    When enabled, an access route is installed to the host on the other end of the interface

    In Received Packets

    Number of packets received on the interface; indicates whether packets are unicast or multicast

    In Received Bytes

    Number of bytes received on the interface; indicates whether bytes are unicast or multicast

    In Policed Packets

    Number of packets policed on the interface; discarded because they exceeded a traffic contract to their destination

    In Policed Bytes

    Number of bytes policed on the interface; discarded because they exceeded a traffic contract to their destination

    In Error Packets

    Number of packets determined to be in error at the interface

    In Invalid Source Address Packets

    Number of packets determined to have originated from an invalid source address

    Out Forwarded Packets

    Number of packets forwarded from the interface; indicates whether packets are unicast or multicast

    Out Forwarded Bytes

    Number of bytes forwarded from the interface; indicates whether bytes are unicast or multicast

    Out Scheduler Drops Packets

    Number of packets dropped by the out scheduler; indicates whether packets are committed, conformed, or exceeded

    Out Scheduler Drops Bytes

    Number of bytes dropped by the out scheduler; indicates whether bytes are committed, conformed, or exceeded

    Policy

    Indicates which policy is attached and whether it is on the input or output of the interface

    classifier-group

    Name of a CLACL attached to the interface and number of entry

    exception http-redirect

    Number of packets and bytes assigned to http-redirect

    filter

    Number of packets and bytes dropped because of the CLACL

    color

    Explicit color applied to packet flow for queuing; green, yellow, or red:

    Packets logged

    Number of packets colored

    Bytes logged

    Number of bytes colored

    next hop

    Address of the next-hop destination:

    Packets transmitted

    Number of packets sent to the next-hop address

    Bytes transmitted

    Number of bytes sent to the next-hop address

    forward

    Number of packets and bytes forwarded because of the CLACL

    aaa count enable

    Classifier action that denotes that the classifier-specific statistics accounting feature is enabled for the classifier group

    Note: This field is displayed only if the classifier-specific statistics accounting feature is enabled.

    interface

    Interface rule to forward all packets that match the current classifier control list

    next-hop

    Next-hop IP addresses are used as forwarding solutions, and the order of the rule within the classifier that the router uses to choose the solutions. The phrase in parentheses describes whether the rule entry is reachable, active, and supported for the configured policy

    rate-limit-profile

    Name of the rate-limit profile

    committed

    Number of packets and bytes within the committed rate limit

    conformed

    Number of packets and bytes exceeding the committed rate limit but within the peak rate

    exceeded

    Number of packets and bytes exceeding the peak rate

    action

    Action performed on the packets matched by the rules in the rate-limit profile

     

    Related Documentation

     

    Published: 2014-08-14