No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Matching Sequence Of Ip-car And the Statistic Car Ip

Publication Date:  2012-07-17 Views:  59 Downloads:  0
Issue Description
The ip-car command is executed on the USG2100:
firewall zone trust
 ip-car enable
 ip-car inzone 0 acl-number 2000
 ip-car outzone 0 acl-number 2000
 ip-car inzone 1 acl-number 2001
 ip-car outzone 1 acl-number 2001
Note: If the same ACL is configured for multiple levels, the lowest level (level 0) matches users in the ACL. That is, the sequence is 2000 > 2001.
The ip-car command is executed on the USG5300:
firewall zone trust
 set priority 85
 add interface GigabitEthernet0/0/2
 statistic enable ip outzone
 statistic car ip outbound 3 acl-number 3900
 statistic car ip outbound 4 acl-number 3003
 statistic car ip outbound 2 acl-number 3000
Note: If the same ACL is configured for multiple levels, the ip-car command matches the levels in the displayed order. In the previous example, the match order is 3900 > 3003 > 3000.
Alarm Information
None
Handling Process
None
Root Cause
None
Suggestions
The USG2100 is quite different from the USG5300 in terms of IP CAR match sequence.

END