554 BigIron RX Series Configuration Guide53-1001810-01Enabling ACL duplication check21Enabling ACL duplication checkIf desired, you can enable software checking for duplicate ACL entries. To do so, enter the followingcommand at the Global CONFIG level of the CLI.BigIron RX(config)# acl-duplication-check-disableSyntax: [no] acl-duplication-check-disableThis command is disabled by default.ACL accountingThe device monitors the number of times an ACL is used to filter incoming or outgoing traffic on aninterface.This feature is disabled by default.To enable ACL accounting, enter a commnad such as the folllowing.BigIron RX(config)# acl-accounting-enableSyntax: [no] acl-accounting-enableUse the no form of this command to disable ACL accounting.The show access-list accounting command displays the number of “hits” or how many times ACLfilters permitted or denied packets that matched the conditions of the filters.NOTEACL accounting does not tabulate nor display the number of Implicit denials by an ACL.The counters that are displayed on the ACL accounting report are:• 1s – Number of hits during the last second. This counter is updated every second.• 1m – Number of hits during the last minute. This counter is updated every one minute.• 5m – Number of hits during the last five minutes. This counter is updated every five minutes.• ac – Accumulated total number of hits. This counter begins when an ACL is bound to aninterface and is updated every one minute. This total is updated until it is cleared.The accumulated total is updated every minute. For example, a minute after an ACL is bound toa port, it receives 10 hits per second and continues to receive 10 hits per second. After oneminute, the accumulated total hits is 600. After 10 minutes, there will be 6000 hits.The counters can be cleared when the device is rebooted, when an ACL is bound to or unboundfrom an interface, or by entering a clear access-list command.
