`show port-access policy hitcounts`

Syntax

Syntax that shows statistical information in the form of hit counts:

show port-access policy <POLICY-NAME> hitcounts {port | client}

Description

Shows the statistics and the current rate of policy applied on the port or the client.

Command context

Operator (>) or Manager (#)

Parameters

<POLICY-NAME>: Specifies the policy name.
port: Shows policy statistics matching the policy name in the port mode.
client: Shows policy statistics matching the policy name in the client mode.

Authority

Operators or Administrators or local user group members with execution rights for this command. Operators can execute this command from the operator context (>) only.

Examples

Showing policy hit counts (statistics) with current rate:

switch# show port-access policy CLEARPASS-REDIRECT hitcounts port

Port Access Policy Hit-Counts Details:
======================================

Policy Name   : CLEARPASS-REDIRECT
Policy Type   : Local
Policy Status : Applied

SEQUENCE CLASS             TYPE ACTION                            CUR-RATE(kbps)
-------- ----------------- ---- --------------------------------- --------------
3        clearpass-web     ipv4 cir kbps 1024 cbs 2048 exceed
                                drop                              512

Class Name : dhcp
Class Type : ipv4

SEQUENCE    CLASS-ENTRY                                             HIT-COUNT
----------- ------------------------------------------------------- -----------
10          match icmp any any count                                0

Class Name : clearpass-web
Class Type : ipv4

SEQUENCE    CLASS-ENTRY                                             HIT-COUNT
----------- ------------------------------------------------------- -----------
10          match udp any any count                                 15101830

Class Name : web-traffic
Class Type : ipv4

SEQUENCE    CLASS-ENTRY                                             HIT-COUNT
----------- ------------------------------------------------------- -----------
10          match any any any count                                 0
20          match any 10.1.1.1 10.1.1.2 dscp AF11 count             0

Class Name : class6
Class Type : ipv6

SEQUENCE    CLASS-ENTRY                                             HIT-COUNT
----------- ------------------------------------------------------- -----------
10          match any any any count                                 0
20          match icmpv6 2001:db8:a::123 2001:db8:a::125 dscp AF11
             count                                                  0