02-12-2002 01:25 AM - edited 03-01-2019 08:26 PM
Hello all,
I have a question about ACLs. When I do a "sh access-list xxx" on my Cisco 6500, I don't see a match next to the access line altough I just made one. Could it come from the fact that it is a port filtering (access-list permit tcp host xxx.xxx.xxx.xxx host xxx.xxx.xxx.xxx eq 7500)?
Thanks for your help.
02-13-2002 05:11 PM
Packets passing through the MSFC would match this ACL. Remember 6500 uses PFC hardware for forwarding traffic. Try creating a ACL to match ICMP and ping through the MSFC with some options in the Ping packet (like record route option). This will force the packet to be process swithed and you may see the hits. let us know
02-25-2002 02:03 AM
Thanks for your information.
I've done a "ping -r" and the ICMP ACL matches whereas with a "ping" it doesn't match. But I don't understand exactly why.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide