display portal acl

Syntax

display portal acl { all | dynamic | static } interface interface-type interface-number [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

all: Displays all portal access control lists (ACLs), including dynamic and static portal ACLs.

dynamic: Displays dynamic portal ACLs—ACLs generated dynamically after a user passes portal authentication.

static: Displays static portal ACLs—ACLs generated through portal related configuration, such as portal-free rule configuration.

interface interface-type interface-number: Displays the ACLs on the specified interface.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display portal acl to display the ACLs on a specified interface.

Examples

# Display all ACLs on interface VLAN-interface 2.

<Sysname> display portal acl all interface vlan-interface 2
IPv4 portal ACL rules on Vlan-interface2:
 Rule 0
 Inbound interface : all
 Type              : static
 Action            : permit
 Source:
    IP        : 0.0.0.0
    Mask      : 0.0.0.0
    MAC       : 0000-0000-0000
    Interface : any
    VLAN      : 0
    Protocol  : 0
 Destination:
    IP        : 192.168.1.15
    Mask      : 255.255.255.255

 Rule 1
 Inbound interface : all
 Type              : dynamic
 Action            : permit
 Source:
    IP        : 8.8.8.8
    Mask      : 255.255.255.255
    MAC       : 0015-e9a6-7cfe
    Interface : any
    VLAN      : 2
    Protocol  : 0
 Destination:
    IP        : 0.0.0.0
    Mask      : 0.0.0.0
 Author ACL:
    Number    : 3001

 Rule 2
 Inbound interface : all
 Type              : static
 Action            : redirect
 Source:
    IP        : 0.0.0.0
    Mask      : 0.0.0.0
    MAC       : 0000-0000-0000
    Interface : any
    VLAN      : 2
    Protocol  : 6
 Destination:
    IP        : 0.0.0.0
    Mask      : 0.0.0.0

 Rule 3
 Inbound interface : all
 Type              : static
 Action            : deny
 Source:
    IP        : 0.0.0.0
    Mask      : 0.0.0.0
    MAC       : 0000-0000-0000
    Interface : any
    VLAN      : 2
    Protocol  : 0
 Destination:
    IP        : 0.0.0.0
    Mask      : 0.0.0.0

IPv6 portal ACL rules on Vlan-interface2:
 Rule 0
 Inbound interface : all
 Type              : static
 Action            : permit
 Source:
    IP              : ::
    Prefix length : 0
    MAC            : 0000-0000-0000
    Interface     : any
    VLAN           : 8
    Protocol      : 0
 Destination:
    IP              : 2::2
    Prefix length : 128
    Port            : any

 Rule 1
 Inbound interface : all
 Type              : static
 Action            : redirect
 Source:
    IP              : ::
    Prefix length : 0
    MAC            : 0000-0000-0000
    Interface     : any
    VLAN           : 8
    Protocol      : 6
 Destination:
    IP            : ::
    Prefix length : 0
    Port            : 80

Table 12: Command output

Field

Description

Rule

Sequence number of the portal ACL, which is numbered from 0 in ascending order.

Inbound interface

Interface to which the portal ACL is bound.

Type

Type of the portal ACL.

Action

Match action in the portal ACL.

Protocol

Transport layer protocol number in the portal ACL.

Source

Source information in the portal ACL.

IP

Source IP address in the portal ACL.

Mask

Subnet mask of the source IP address in the portal ACL.

Prefix length

Source IPv6 address prefix in the portal ACL.

MAC

Source MAC address in the portal ACL.

Interface

Source interface in the portal ACL.

VLAN

Source VLAN in the portal ACL.

Protocol

Protocol type in the portal ACL.

Destination

Destination information in the portal ACL.

IP

Destination IP address in the portal ACL.

Mask

Subnet mask of the destination IP address in the portal ACL.

Prefix length

Destination IPv6 address prefix in the portal ACL.

Author ACL

Authorization ACL information. It is displayed only when the value of the Type field is dynamic.

Number

Authorization ACL number assigned by the RADIUS server. If the server assigns no ACL, this field displays None.