1.3.2 Verifying the Filter

<Structure of this section>

(1) Checking the Entries Configured for an Ethernet Interface

The following figure shows how to check operation when a filter is set for an Ethernet interface.

Figure 1-3: Checking operation when a filter is set for an Ethernet interface
> show access-filter 1/0/1 IPX_DENY Date 20XX/12/01 12:00:00 UTC Using Port:1/0/1 in Extended MAC access-list:IPX_DENY remark "deny only ipx" 10 deny any any ipx matched packets : 74699826 20 permit any any matched packets : 264176 implicitly denied packets: 0

Figure 1-3: Checking operation when a filter is set for an Ethernet interface

> show access-filter 1/0/1 IPX_DENY
Date 20XX/12/01 12:00:00 UTC
Using Port:1/0/1 in
Extended MAC access-list:IPX_DENY
      remark "deny only ipx"
      10 deny any any ipx
         matched packets       :  74699826
      20 permit any any
         matched packets       :    264176
      implicitly denied packets:         0

Make sure that Extended MAC access-list is displayed for the filter for the specified port.

(2) Verifying Entries Configured for VLAN Interfaces

The following figure shows how to check operation when a filter is set for a VLAN interface.

Figure 1-4: Checking operation when filters are set for VLAN interfaces
> show access-filter interface vlan 10 FLOOR_A_PERMIT Date 20XX/12/01 12:00:00 UTC Using Interface:vlan 10 in Standard IP access-list:FLOOR_A_PERMIT remark "permit only Floor-A" 10 permit 192.168.0.0 0.0.0.255 any matched packets : 74699826 implicitly denied packets: 2698

Figure 1-4: Checking operation when filters are set for VLAN interfaces

> show access-filter interface vlan 10 FLOOR_A_PERMIT
Date 20XX/12/01 12:00:00 UTC
Using Interface:vlan 10 in
Standard IP access-list:FLOOR_A_PERMIT
      remark "permit only Floor-A"
      10 permit 192.168.0.0 0.0.0.255 any
         matched packets       :  74699826
      implicitly denied packets:      2698

Make sure that Standard IP access-list is displayed for the filter for the specified VLAN.