05-14-2008 09:39 PM - edited 03-11-2019 05:45 AM
Hi,
With the below test config I can't seem to generate a single log entry from the ACL? Has anyone had experience in logging with port based ACL's? The icmp traffic is being dropped - just not logged.
3750 running Adv IP Services
interface GigabitEthernet1/0/25
switchport access vlan 701
switchport mode access
ip access-group TEST in
ip access-list extended TEST
deny icmp any any log
permit ip any any log
ip access-list log-update threshold 1
"show access-lists hardware counters" does show drops.
Cheers
Kent.
05-20-2008 06:00 AM
Go through this document.
Access Lists
http://www.cisco.com/en/US/tech/tk648/tk361/tk821/tsd_technology_support_sub-protocol_home.html
05-20-2008 09:17 AM
The TAC confirms that ACL logging is not supported for an IP ACL applied to a layer 2 switchport. Logging only works when applied to a switchport in routed mode or an SVI.
Kent.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide