Nexus 7k not showing ACL logging hits

[santoshpat]

Guys, 

I have multiple ACLs running on the box but some of the acls are not showing any acl hits at all. 
I have enabled statistics per entry option but i still dont see any hits. 

Any suggestions ? 

[Sergiu.Daniluk]

Hi @santoshpat 

Can you share the following outputs:

show run aclmgr
show run interface <X> (where ACL is applied) 
show ip access-list ACL-name

Cheers,

Sergiu

[santoshpat]

I have multiple access lists and cannot share them all, But this is the problem one. I have not applied it on any interface yet. 


IP access list 1IG
statistics per-entry
10 deny ip 172.18.71.0/24 any
20 deny ip 172.18.100.0/23 any
30 deny ip 172.18.54.84/32 any
40 deny ip 172.18.55.0/24 any
50 deny ip 172.18.204.0/23 any
60 permit ip 70.168.47.0/24 any
70 permit ip 70.168.83.0/24 any
80 permit ip 68.99.123.0/24 any
90 permit ip 68.1.16.0/23 any
100 permit ip 68.111.106.0/27 any
110 permit ip 68.111.106.128/25 any
120 permit ip 68.111.107.0/27 any
130 permit ip 68.230.241.0/24 any
140 permit ip 68.230.240.0/24 any
150 permit ip 68.99.120.0/24 any
160 permit ip 68.111.106.80/28 any
170 permit ip 172.18.16.0/22 any
180 permit ip 172.18.18.0/23 any
190 permit ip 172.18.20.0/23 any
200 permit ip 172.18.10.64/26 any
210 permit ip 172.18.0.0/17 any
220 permit ip 172.18.192.0/18 any
230 permit ip 70.168.70.0/23 any
240 permit ip 68.12.18.0/24 any
250 permit ip 172.18.42.0/23 any
260 permit ip 172.18.53.192/27 any


interface Ethernet1/1
description uplink
ip access-group 150 in
ip address 68.1.15.240/30
ip ospf message-digest-key 
ip ospf cost 100
ip ospf network point-to-point
ip router ospf 1 area 0.0.0.10
no shutdown

[Sergiu.Daniluk · Accepted solution]

Hi @santoshpat 

If you didn't applied it on any interface, than the ACL will not show any statistics.

Once you apply it, then the ACL will start filtering and count the statistics only on the interface you applied it.

Cheers,

Sergiu