Access List Logs

[amatorjnr]

I have a standard access already configured without the log command.

Is there a way to still enable logging without having to redo the whole access-list?

I want to be able to see the allowed IPs and blocked IPs 

[balaji.bandi]

You can do show access-list

it will give you output with  line number 10, 20, 30, so on

Then change example line 20 only that line you looking to add logs(it not required to remove all the ACL)

no 20 permit XXXXX

20 permit XXXX log

make sense ?

[amatorjnr]

i want to log all entries, I can't delete and redo them individually cos it's already in a production environment.

That's why I'm looking for a way around 

[johnd2310]

Hi,

You cannot enable logging for all entries at once,. You have to add logging for each entry. You can create a new access-list with log enabled for all entries and then replace the current access-list with the new access-list on your interface.

Thanks

John