Focus

Prisma SD-WAN ION CLI Reference

inspect priority-policy lookup

Table of Contents

inspect priority-policy lookup

Use the inspect priority-policy lookup command to inspect the hit counts for priority policy rules and identifies policy rules which override other rules in the stack.

The app-wildcard option inspects policy rules which do not specify any applications.

Command

inspect network-policy lookup (app-wildcard | application= application name| nctx-wildcard | network-context= network context ID| srcv4=src-ipv4| dstv4=dstipv4 srcv6=src-ipv6| dstv6=dstipv6))

Options

app-wildcard	Use app-wildcard to display policy rules that do not specify any application.
application	Enter an application name to display policy rules for the specified application.
nctx-wildcard	Use nctx-wildcard to display policy rules that do not specify any network context.
network-context	Enter a network context ID to display policy rules for the specified network context.
srcv4	Enter the source IP address.
dstv4	Enter the destination IP address.
srcv6	Enter the source IP address. `Release 6.2.1`
dstv6	Enter the destination IP address. `Release 6.2.1`

Command Notes

Role	Super, Read Only
Related Commands	—
Introduced in	Release 5.0.1

Example

inspect priority-policy lookup application=1658139888834015928 srcv4=30.1.1.2 dstv4=10.1.1.2 nctx-wildcard
Requested App Id:   1658139888834015928 : ping                         
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Priority Policy Rule	:   1667810193597008628 : test default user            
  Policy Set        	:   1662017536133021028 : test-userid                  
  Stack Index | Order Number:  0 | 1025
  Matching App Id   	:   1658139888834015928 : ping                         
  Source Prefix     	:  none
  Destination Prefix	:  none
  Users             	: UserGroups        	:
                        : CN=engineering,DC=sdwanamsteltest,DC=onmicrosoft,DC=com           :
                        : CN=sales,DC=sdwanamsteltest,DC=onmicrosoft,DC=com                 :
  Network_Context Id	:  none
  Source            	: Destination       	: Active Override    
  0.0.0.0/0         	: 0.0.0.0/0         	:

inspect priority-policy lookup srcv6=3000::1 application=timbuktu
Requested App Id:     16409223713350210 : timbuktu
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Priority Policy Rule	:     16409225137330230 : default
  Policy Set        	:     16409225090350228 : Default QoS Simple Stack Default Rule Policy Set (Simple)
  Stack Index | Order Number:  0 | 1024
  Matching App Id   	:  WILDCARD             :
  Source Prefix       	:  none
  Destination Prefix  	:  none
  Users 		:  any
  UserGroups 		:  any
  Network_Context Id  	:  none
  Source              	: Destination         	: Active Override
  ::/0                	: ::/0                	:

Priority Policy Rule	:     16409225162750231 : enterprise-default
  Policy Set        	:     16409225090350228 : Default QoS Simple Stack Default Rule Policy Set (Simple)
  Stack Index | Order Number:  0 | 1024
  Matching App Id   	:  WILDCARD             :
  Source Prefix       	:  none
  Destination Prefix  	:     16409222610090238 : EnterpriseGlobalPrefix
  Users 		:  any
  UserGroups 		:  any
  Network_Context Id  	:  none
  Source              	: Destination         	: Active Override
  ::/0                	: fc00::/7

inspect priority-policy hits policy-rules

inspect performance-policy incidents