You are here: CLI_commands > show datapath
Previous TopicNext Topic

show datapath

show datapath {acl <id>|acl-all|acl-allocation|acl-rule <rule>|acl-rule-detail <acl>|bridge| dmo session| dmo station <mac>| dns-id-map| mcast|nat-pool <id>|route|session|statistics|user|vlan}

Description

This command displays the system statistics for an IAP.

Syntax

Parameter

Description

acl <id> Displays datapath statistics associated with a specified ACL.
acl-all Displays datapath statistics associated with all ACLs.
acl-allocation Displays datapath statistics associated with allocated ACLs
acl-rule <rule> Displays ACL rule to be applied.
acl-rule-detail <acl> Displays the rule details of a specified ACL.
bridge Displays bridge table entry statistics including MAC address, VLAN, assigned VLAN, Destination and flag information for an AP.
dmo session Displays details of a DMO sessions.
dmo station <mac> Displays Mac address of a DMO station.
dns-id-map Displays mapping details for the DNS ID.
mcast Displays the mobility multicast-group table that is used to flood the multicast RA traffic to the roamed clients.
nat-pool <id> Displays the contents of the datapath NAT entries table. It displays NAT pools as configured in the datapath. Statistics include pool, SITP start, SIP end and DIP.
route Displays datapath route table statistics.
session Displays datapath session statistics.
statistics Displays all the IP flows of a wireless device or Aruba AP. Statistics include table entries including source IP, destination IP, protocol, SPort, DPort, Cntr, priority, ToS, age, destination, TAge and flags.
user Displays datapath user statistics such as current entries, pending deletes, high water mark, maximum entries, total entries, allocation failures, invalid users and maximum link length.
vlan Displays VLAN table information such as VLAN memberships inside the datapath including L2 tunnels that carry L2 traffic.

Usage Guidelines

Use the show datapath command to display various datapath statistics for debugging purposes.

Example

The following example shows the output of the show datapath acl id command:

Datapath ACL 130 Entries

-----------------------

Flags: P - permit, L - log, E - established, M/e - MAC/etype filter

S - SNAT, D - DNAT, R - redirect, r - reverse redirect m - Mirror

I - Invert SA, i - Invert DA, H - high prio, O - set prio, C - Classify Media

A - Disable Scanning, B - black list, T - set TOS, 4 - IPv4, 6 - IPv6

----------------------------------------------------------------

1: any any 17 0-65535 8209-8211 P4

2: 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 any P4

3: 192.168.10.0 255.255.254.0 224.0.0.0 224.0.0.0 any P4

4: 192.168.10.0 255.255.254.0 any any PS4

5: any any any P4

The following example shows the output of show datapath statistics command:

Datapath Counters

---------------------

Counter Value

------- ------

Tagged frames dropped on untagged interface 0

Frames dropped for being too short 0

Frames received on port not in VLAN 0

Non-dot1x frames dropped during L2 blocking 0

Frames dropped for ingress change on permanent bridge entry 0

Frames received on port not in VLAN 0

Unicast frames filtered 14

Frames dropped due to FP firewall 6

Frames that failed FP spoofing check 0

Frames dropped with logging 0

Frames dropped due to unknown FP opcode 0

Frames freed by FP 3

Frames that failed SP spoofing check 0

Frames dropped due to excessive user misses 0

Frames dropped due to no buffers 0

Frames dropped due to no 'br0' device 0

Frames dropped due to no stack IP address 0

Frames dropped while user miss pending 0

Frames dropped when user entry creation failed 0

Frames dropped due to unknown FP opcode 0

Frames dropped due to initial IP route lookup failure 0

Frames dropped due to final IP route lookup failure 0

Frames dropped due to ARP processing failure 0

Frames dropped due to illegal device index 0

Frames dropped due to interface being down 0

Unicast frames not bridged due to split-tunnel destination 0

Unicast frames from bridge role user dropped 0

Unicast frames that could not be bridged to split tunnel 0

Frames dropped due to missing PPP device 0

Frames dropped due to pullup failure 0

Frames dropped due to misalignment 0

Frames received by firewall 4884

DHCP frames on DHCP local VLAN 776

PPPOE frames to session processing 0

Frames needing bridging 4890

Mesh frames forwarded 0

Thin AP frames forwarded 0

Frames to session processing 4892

Frames to SP 87

Frames bridged by SP 6

Frames routed by SP 0

Frames for SP session processing 45

Frames for FP application processing 36

The output of this command includes the following parameters:

Parameter

Description

Counter Shows counter statistics of the controller.
Value Values output from this command represent the water-marks since the last boot of the controller.

Command History

Version

Description

Aruba Instant 6.3.1.1-4.0

This command is modified.

Aruba Instant 6.2.1.0-3.3

This command is introduced.

Command Information

IAP Platform

Command Mode

All platforms

Privileged EXEC mode