Technical Documentation
New
Monitoring the Policy Configuration of IP Interfaces
Purpose
Display information about an IP interface (including policy list statistics).
Action
To display information about IP policy lists on ATM interfaces:
host1#show ip interface atm 11/0.6
ATM11/0.6 line protocol Atm1483 is down, ip is down (ready)
Network Protocols: IP
Internet address is 10.12.1.1/255.255.255.0
Broadcast address is 255.255.255.255
Operational MTU = 0 Administrative MTU = 0
Operational speed = 100000000 Administrative speed = 0
Discontinuity Time = 0
Router advertisement = disabled
Proxy Arp = disabled
ARP spoof checking = enabled
Network Address Translation is disabled
TCP MSS Adjustment = disabled
Administrative debounce-time = disabled
Operational debounce-time = disabled
Access routing = disabled
Multipath mode = hashed
Auto Configure = disabled
Auto Detect = disabled
Re-Authenticate Auto Detect = disabled
Inactivity Timer = disabled
Use Framed Routes = disabled
Warm-restart initial-sequence-preference: Operational = 0 Administrative = 0
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Policed Packets 0, Bytes 0
In Error Packets 0
In Invalid Source Address Packets 0
In Discarded Packets 0
Out Forwarded Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Routed Packets 0, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0, Bytes 0
Out Discarded Packets 0
IP policy output testPol
classifier-group *
0 packets, 0 bytes
forward
Virtual-router: default
List:
interface ATM11/0.1, order 100, rule 2 (not supported in output
policy)
next-hop 1.1.1.1, order 100, rule 3 (active) (not supported in
output policy)
rate-limit-profile R2
committed rate: 0 bps, committed burst: 0 bytes (default)
peak rate: 0 bps, peak burst: 0 bytes (default)
committed: 0 packets, 0 bytes, action: transmit conditional
conformed: 0 packets, 0 bytes, action: transmit conditional
exceeded: 0 packets, 0 bytes, action: drop
log
classifier-group video entry 1
0 packets, 0 bytes
filterTo display information about IP policy lists on tunnel interfaces:
 | Note: The packets field in the IP policy output section displays the number of fragments or packets sent out from the tunnel interface for which an output policy is attached, depending on whether you enabled preservation of output policy statistics using the enable-frag-stats command. Although this field displays the unit of measure as packets, it denotes the number of fragments if statistics generation for output policies based on fragments is enabled. Otherwise, this field indicates the number of output policed packets on the tunnel interface. |
host1#show ip interface tunnel l2tp:1/19/21
Out Forwarded Packets 1, Bytes 1500
Unicast Packets 1, Bytes 1500
Multicast Routed Packets 0, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0, Bytes 0
Out Discarded Packets 0
IP policy output POLICY-USER-OUT
classifier-group USER-OUT-PERMIT entry 1
2 packets, 1596 bytes
forward
queue 0: traffic class best-effort, bound to ip TUNNEL l2tp:1/19/21
Queue length 0 bytes
Forwarded packets 2, bytes 1590
Meaning
Table 1 lists the show ip interfaces command output fields.
Table 1: show ip interfaces Output Fields
Field Name | Field Description |
|---|---|
Network Protocols | Protocols configured on the interface |
Internet address | IP address of the interface |
Broadcast address | Broadcast address used by the interface |
Operational MTU | Operational maximum transmission unit (MTU) for packets sent on this interface |
Administrative MTU | Administrative maximum transmission unit for packets sent on this interface |
Operational speed | Speed known to the IP layer in bits per second; equal to the administrative speed if configured, otherwise inherited from the lower layer |
Administrative speed | Configured speed known to the IP layer in bits per second |
Discontinuity Time | Time since the counters on the interface became invalid; for example, when the line module was reset |
Router Advertisement | When enabled by the ip irdp command, the router advertises its presence via the ICMP Router Discovery Protocol (IRDP) |
Administrative debounce-time | Administrative time delay that an interface must remain in a new state before the routing protocols react to the state change |
Operational debounce-time | Time delay that an interface must remain in a new state before the routing protocols react to the state change |
Access routing | When enabled, an access route is installed to the host on the other end of the interface |
In Received Packets | Number of packets received on the interface; indicates whether packets are unicast or multicast |
In Received Bytes | Number of bytes received on the interface; indicates whether bytes are unicast or multicast |
In Policed Packets | Number of packets policed on the interface; discarded because they exceeded a traffic contract to their destination |
In Policed Bytes | Number of bytes policed on the interface; discarded because they exceeded a traffic contract to their destination |
In Error Packets | Number of packets determined to be in error at the interface |
In Invalid Source Address Packets | Number of packets determined to have originated from an invalid source address |
Out Forwarded Packets | Number of packets forwarded from the interface; indicates whether packets are unicast or multicast |
Out Forwarded Bytes | Number of bytes forwarded from the interface; indicates whether bytes are unicast or multicast |
Out Scheduler Drops Packets | Number of packets dropped by the out scheduler; indicates whether packets are committed, conformed, or exceeded |
Out Scheduler Drops Bytes | Number of bytes dropped by the out scheduler; indicates whether bytes are committed, conformed, or exceeded |
Policy | Indicates which policy is attached and whether it is on the input or output of the interface |
classifier-group | Name of a CLACL attached to the interface and number of entry |
exception http-redirect | Number of packets and bytes assigned to http-redirect |
filter | Number of packets and bytes dropped because of the CLACL |
color | Explicit color applied to packet flow for queuing; green, yellow, or red: |
Packets logged | Number of packets colored |
Bytes logged | Number of bytes colored |
next hop | Address of the next-hop destination: |
Packets transmitted | Number of packets sent to the next-hop address |
Bytes transmitted | Number of bytes sent to the next-hop address |
forward | Number of packets and bytes forwarded because of the CLACL |
interface | Interface rule to forward all packets that match the current classifier control list |
next-hop | Next-hop IP addresses are used as forwarding solutions, and the order of the rule within the classifier that the router uses to choose the solutions. The phrase in parentheses describes whether the rule entry is reachable, active, and supported for the configured policy |
rate-limit-profile | Name of the rate-limit profile |
committed | Number of packets and bytes within the committed rate limit |
conformed | Number of packets and bytes exceeding the committed rate limit but within the peak rate |
exceeded | Number of packets and bytes exceeding the peak rate |
action | Action performed on the packets matched by the rules in the rate-limit profile |
