Use this command to help validate NACL entries:
# dpctl show pipeline internal table nacl
RP - Rx packet TP - Tunnel pkt
Act - Action (R - Redirect, P - Permit, D - Drop)
KT - Key type DF - Don't fragment
FM - Flow miss
-----------------------------------------------------------------------------------
Idx LifType Lif FM RP TP KT Proto SPort DPort Act Nexthop Data CoPPIdx DF
-----------------------------------------------------------------------------------
0 * 70 * * * * * * * R 1 /71 - 0 *
1 * 71 * * * * * * * R 1 /70 - 0 *
9 * 65 * * * * * * * R 3 /4 - 0 *
10 * 2 * * * * * * * R 1 /65 - 0 *
11 * 66 * * * * * * * R 3 /0 - 0 *
12 * * 1 * * * * * * R 1 /66 - 0 *
13 * 67 * * * * * * * R 3 /1 - 0 *
14 * * 1 * * * * * * R 1 /67 - 0 *
15 * 68 * * * * * * * P - - - *
16 3 * * * * * * * * D - - - 1
17 5 * * 1 1 * * * * D - - - 1
18 * * * * * * * * * D - - - *
19 * * * * * V6 * * * D - - - *
20 * * * * * V4 * * * D - - - *
21 * * * * * V6 * * * D - - - *
126 * * 1 * * * * * * R 1 /68 - 0 *
127 * * * * * * * * * P - - - *