ACL debug

[Spinu Viorel]

Hello,

what is the difference between:

1) %FW-6-DROP_PKT: Dropping tcp pkt ....

and

2) %SEC-6-IPACCESSLOGP: .....

I know that 2) is about a packet matching an ACL, but 1) I can't figure what is it becouse I can't find any ACL rule that is droping my packet.

thank u

[abinjola · Accepted solution]

1) %FW-6-DROP_PKT: Dropping tcp pkt

The above is about IP inspect dropping the pkt, you must have IP inspect/IOS firewall turned on