Show Commands
show cts role-based counters
To display the configuration status of role-based access control list (RBACL) statistics and list the statistics
for all RBACL policies, use the show cts role-based counters command.
show cts role-based counters [sgt {sgt-value| any| unknown}] [dgt {dgt-value| any| unknown}]
Syntax Description
sgt
sgt-value
any
unknown
dgt
dgt-value
Command Default
None
Command Modes
Any configuration mode
Command History
Release
8.0(1)
5.0(2)
Usage Guidelines
To use this command, you must enable the Cisco TrustSec feature using the feature cts command.
This command requires the Advanced Services license.
Examples
This example shows how to display the configuration status of RBACL statistics and the total number of
packets that match RBACL policies for a specific SGT and DGT:
switch(config)# show cts role-based counters
RBACL policy counters enabled
Counters last cleared: 08/22/2016 at 09:16:07 AM
sgt:unknown dgt:unknown [0]
rbacl:deny_ip(monitored)
deny ip [0]
Specifies the source security group tag (SGT).
Source SGT value. The range is from 0 to 65519.
Specifies any SGT or DGT.
Specifies an unknown SGT or DGT.
Specifies the destination security group tag (DGT).
Destination SGT value. The range is from 0 to 65519.
Modification
The command output was updated.
This command was introduced.
Cisco Nexus 7000 Series Security Command Reference
show cts role-based counters
745