01-22-2011 11:16 AM - edited 03-04-2019 11:10 AM
Hello,
I have applied named access-list in output direction on 1GE interface on GSR12400 (IOS XR 3.4),
but there is no matches. Counters doesn't increase although access-list blocks or permits certain packets (access-list works as it should).
Why is it so?
thnaks in advance,
A
Solved! Go to Solution.
01-27-2011 11:20 AM
Hi Antonio,
I assume the counter you meant is the counter of access list. If this is the case, you need to enable hardware counter in access-list you applied in interface.
Look example I did in my lab:
RP/0/RP0/CPU0:CRS4A#show run int gi0/1/0/3
Thu Jan 27 11:14:45.691 PST
interface GigabitEthernet0/1/0/3
cdp
ipv4 address 12.1.1.2 255.255.255.0
ipv4 access-group ACL egress hardware-count interface-statistics
!
RP/0/RP0/CPU0:CRS4A#show access-lists ipv4 ACL
Thu Jan 27 11:16:18.552 PST
ipv4 access-list ACL
10 permit icmp any host 10.1.1.2
20 permit ipv4 any any
01-27-2011 11:20 AM
Hi Antonio,
I assume the counter you meant is the counter of access list. If this is the case, you need to enable hardware counter in access-list you applied in interface.
Look example I did in my lab:
RP/0/RP0/CPU0:CRS4A#show run int gi0/1/0/3
Thu Jan 27 11:14:45.691 PST
interface GigabitEthernet0/1/0/3
cdp
ipv4 address 12.1.1.2 255.255.255.0
ipv4 access-group ACL egress hardware-count interface-statistics
!
RP/0/RP0/CPU0:CRS4A#show access-lists ipv4 ACL
Thu Jan 27 11:16:18.552 PST
ipv4 access-list ACL
10 permit icmp any host 10.1.1.2
20 permit ipv4 any any
01-31-2011 12:37 AM
Thank you very much Rivalino,
A.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide