cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1037
Views
0
Helpful
1
Replies

TrustSec SGACL Logging

Rob4
Cisco Employee
Cisco Employee

I am looking at SGACL logging for a customer for monitoring TrustSec. Can someone explain what the value in the parentheses means? I thought it was the SGT values, but its definitely not the values or port numbers.  

 

*Jun 2 08:58:06.489: %C4K_IOSINTF-6-SGACLHIT: list deny_udp_src_port_log-30 Denied udp 24.0.0.23(100) -> 28.0.0.91(100), SGT8 DGT 12

 

 

Thanks for the assistance! 

1 Reply 1

jeaves@cisco.com
Cisco Employee
Cisco Employee
The log option applies to individual ACEs and causes packets that match the ACE to be logged. The first packet logged by the log keyword generates a syslog message. Subsequent log messages are generated and reported at five-minute intervals. If the logging-enabled ACE matches another packet (with characteristics identical to the packet that generated the log message), the number of matched packets is incremented (counters) and then reported.