show datapath {acl <id>|acl-all|acl-allocation|acl-rule <rule>|acl-rule-detail <acl>|bridge| dmo session| dmo station <mac>| dns-id-map| mcast|nat-pool <id>|route|session|statistics|user|vlan}
This command displays the system statistics for a
Parameter |
Description |
acl <id> | Displays datapath statistics associated with a specified ACL. |
acl-all | Displays datapath statistics associated with all ACLs. |
acl-allocation | Displays datapath statistics associated with allocated ACLs |
acl-rule <rule> | Displays ACL rule to be applied. |
acl-rule-detail <acl> | Displays the rule details of a specified ACL. |
bridge | Displays bridge table entry statistics including MAC address, VLAN, assigned VLAN, Destination and flag information for an AP. |
dmo session | Displays details of a DMO sessions. |
dmo station <mac> | Displays Mac address of a DMO station. |
dns-id-map | Displays mapping details for the DNS ID. |
mcast | Displays the mobility multicast-group table that is used to flood the multicast RA traffic to the roamed clients. |
nat-pool <id> | Displays the contents of the datapath NAT entries table. It displays NAT pools as configured in the datapath. Statistics include pool, SITP start, SIP end and DIP. |
route | Displays datapath route table statistics. |
session | Displays datapath session statistics. |
statistics | Displays all the IP flows of a wireless device or Aruba AP. Statistics include table entries including source IP, destination IP, protocol, SPort, DPort, Cntr, priority, ToS, age, destination, TAge and flags. |
user | Displays datapath user statistics such as current entries, pending deletes, high water mark, maximum entries, total entries, allocation failures, invalid users and maximum link length. |
vlan | Displays VLAN table information such as VLAN memberships inside the datapath including L2 tunnels that carry L2 traffic. |
Use the show
command to display various datapath statistics for debugging purposes.The following example shows the output of the
command:Datapath ACL 130 Entries
-----------------------
Flags: P - permit, L - log, E - established, M/e - MAC/etype filter
S - SNAT, D - DNAT, R - redirect, r - reverse redirect m - Mirror
I - Invert SA, i - Invert DA, H - high prio, O - set prio, C - Classify Media
A - Disable Scanning, B - black list, T - set TOS, 4 - IPv4, 6 - IPv6
----------------------------------------------------------------
1: any any 17 0-65535 8209-8211 P4
2: 192.168.10.0 255.255.254.0 192.168.10.0 255.255.254.0 any P4
3: 192.168.10.0 255.255.254.0 224.0.0.0 224.0.0.0 any P4
4: 192.168.10.0 255.255.254.0 any any PS4
5: any any any P4
The following example shows the output of
command:Datapath Counters
---------------------
Counter Value
------- ------
Tagged frames dropped on untagged interface 0
Frames dropped for being too short 0
Frames received on port not in VLAN 0
Non-dot1x frames dropped during L2 blocking 0
Frames dropped for ingress change on permanent bridge entry 0
Frames received on port not in VLAN 0
Unicast frames filtered 14
Frames dropped due to FP firewall 6
Frames that failed FP spoofing check 0
Frames dropped with logging 0
Frames dropped due to unknown FP opcode 0
Frames freed by FP 3
Frames that failed SP spoofing check 0
Frames dropped due to excessive user misses 0
Frames dropped due to no buffers 0
Frames dropped due to no 'br0' device 0
Frames dropped due to no stack IP address 0
Frames dropped while user miss pending 0
Frames dropped when user entry creation failed 0
Frames dropped due to unknown FP opcode 0
Frames dropped due to initial IP route lookup failure 0
Frames dropped due to final IP route lookup failure 0
Frames dropped due to ARP processing failure 0
Frames dropped due to illegal device index 0
Frames dropped due to interface being down 0
Unicast frames not bridged due to split-tunnel destination 0
Unicast frames from bridge role user dropped 0
Unicast frames that could not be bridged to split tunnel 0
Frames dropped due to missing PPP device 0
Frames dropped due to pullup failure 0
Frames dropped due to misalignment 0
Frames received by firewall 4884
DHCP frames on DHCP local VLAN 776
PPPOE frames to session processing 0
Frames needing bridging 4890
Mesh frames forwarded 0
Thin AP frames forwarded 0
Frames to session processing 4892
Frames to SP 87
Frames bridged by SP 6
Frames routed by SP 0
Frames for SP session processing 45
Frames for FP application processing 36
The output of this command includes the following parameters:
Parameter |
Description |
Counter | Shows counter statistics of the controller. |
Value | Values output from this command represent the water-marks since the last boot of the controller. |
Version |
Description |
Aruba Instant 6.3.1.1-4.0 |
This command is modified. |
Aruba Instant 6.2.1.0-3.3 |
This command is introduced. |
IAP Platform |
Command Mode |
All platforms |
Privileged EXEC mode |