show policy

Syntax

Syntax that filters by policies applied to an interface or VLAN: 

show policy [interface <IFNAME> [in|routed-in] |vlan <VLAN-ID> [in]] 
                 [commands] [configuration] [vsx-peer]

Syntax that filters by the named policy: 

show policy <POLICY-NAME> [commands] [configuration] [vsx-peer]

Syntax that shows statistical information in the form of hit counts: 

show policy hitcounts <POLICY-NAME> [ [interface <IFNAME>|vlan <VLAN-ID>]
                      [in|routed-in] ] [vsx-peer]

Description

Shows information about your defined policies and where they have been applied. When show policy is entered without parameters, information for all policies is shown. The parameters filter the list of policies for which information is shown.

Available filtering includes:

  • The content of a specific policy.

  • All policies applied to a specific interface.

  • All policies applied to a specific VLAN.

To display policy statistics, use the show policy hitcounts form of this command.

Command context

Operator (>) or Manager (#)

Parameters

interface <IFNAME>

Specifies the interface name.

[vlan <VLAN-ID>]

Specifies the VLAN.

in

Specifies the inbound (ingress) traffic direction.

routed-in

Specifies the routed inbound (ingress) traffic direction. Not applicable to a policy applied to a VLAN.

<POLICY-NAME>

Specifies the policy name.

[commands]

Specifies that the policy definition is to be shown as the commands and parameters used to create it rather than in tabular form.

[configuration]

Specifies that the user-configured policies be shown as entered, even if the policies are not active due to policy-definition command issues or hardware issues. This parameter is useful if there is a mismatch between the entered configuration and the previous successfully programmed (active) policies configuration.

hitcounts

Selects for showing, the policy hit counts (statistics).

[vsx-peer]

Shows the output from the VSX peer switch. If the switches do not have the VSX configuration or the ISL is down, the output from the VSX peer switch is not displayed.

Authority

Operators or Administrators. Users without administrator authority can execute this command from the operator context (>) only.

Examples

Showing information for all policies: 

switch# show policy
           Name                                              
           Additional Policy Parameters                      
  Sequence Comment                                           
           Class Type
                    action
-------------------------------------------------------------------------------
           mypolicy                       
        10 
           myipv6class ipv6
                    cir kbps 15000
                    cbs 200
                    exceed drop

        20 
           myipv6class ipv6
                    dscp AF21

Showing a policy as commands: 

switch# show policy mypolicy commands
policy mypolicy
    10 class ipv6 myipv6class action cir kbps 15000 cbs 200 exceed drop 
    20 class ipv6 myipv6class action dscp AF21 
interface 1/1/1
apply policy mypolicy in

Showing policy hit counts (statistics): 

switch# show policy hitcounts mypolicy
Statistics for Policy mypolicy:
Interface 1/1/1* (in):
           Hit Count  Configuration
10 class ipv6 myipv6class action cir kbps 15000 cbs 200 exceed drop 
            19593047  10 match icmpv6 any any count [ 3581 kbps conform ]
                   -  20 ignore udp any any
                   0  30 match tcp any any count [ 0 kbps conform ]
20 class ipv6 myipv6class action dscp AF21 
                   0  10 match icmpv6 any any count
                   -  20 ignore udp any any
                   0  30 match tcp any any count
* policy statistics are shared among each context type (interface, vlan, VRF).
  Use 'policy NAME copy' to create a uniquely named policy.