Matches in ACLs

[fgeryl]

Hello all,

I have a question about ACLs. When I do a "sh access-list xxx" on my Cisco 6500, I don't see a match next to the access line altough I just made one. Could it come from the fact that it is a port filtering (access-list permit tcp host xxx.xxx.xxx.xxx host xxx.xxx.xxx.xxx eq 7500)?

Thanks for your help.

[bsivasub]

Packets passing through the MSFC would match this ACL. Remember 6500 uses PFC hardware for forwarding traffic. Try creating a ACL to match ICMP and ping through the MSFC with some options in the Ping packet (like record route option). This will force the packet to be process swithed and you may see the hits. let us know

[fgeryl]

Thanks for your information.

I've done a "ping -r" and the ICMP ACL matches whereas with a "ping" it doesn't match. But I don't understand exactly why.