Access list log

[lifebook567]

How to log rejected traffic information from access-lists? Just use the word "log" after each access list? Will it record to a file or just pop up like debug? If it record to a file, where is the file? What is the name of that log file? How long it will keep those logs? How it manages those log files, for example, when they are full?

[sundar.palaniappan]

Anytime you use the keyword 'log' in your access list the router would log an entry when there's a match for that access control entry aka., ACE. By default, Cisco routers log everything to the console but you have the option of configuring the router to log events buffer or an external syslog server. Logging to the syslog server is recommended.

AFAIK, the router doesn't log the ACL matches to a separate file but logs to the console, buffer or syslog server as per your setup.

HTH

Sundar