cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1099
Views
0
Helpful
1
Replies

N7k ACL log on console

Vinayaka Raman
Level 1
Level 1

I have a question on Nexus 7k logging

I have an ACL that is applied on vl 827 and can see the match hits..

But somehow I cannot account this on console buffer or syslog.

Below listed is my config..do you see anything is missing ?

NEXUS 7K# show run int vl 827

!Command: show running-config interface Vlan827

!Time: Tue Apr 30 13:39:50 2013

version 5.1(3)

interface Vlan827

  ip access-group ACL_TEST in

  no ip redirects

  ip address 10.45.96.92/28

  ip router eigrp 1

  ip passive-interface eigrp 1

  hsrp 87

    preempt

    priority 200

    ip 10.45.96.94

  ip dhcp relay address 100.6.4.5

  ip dhcp relay address 100.7.4.2

  no shutdown

  description Closet TC-27 ELAN

NEXUS 7K#

NEXUS 7K# show ip access-lists ACL_TEST

IP access list ACL_TEST

        statistics per-entry

        10 permit tcp 10.45.96.80/28 10.45.170.69/32 eq telnet [match=0]

        20 permit tcp 10.45.96.80/28 10.48.178.29/32 eq telnet [match=0]

        30 permit ip any any log [match=3355]

NEXUS 7K# show run | i logging

logging level acllog 3

logging logfile messages 3

logging server 100.7.1.105

logging server 100.190.19.8

logging server 10.48.180.93

logging module 7

logging source-interface loopback 1

logging level syslog 7

NEXUS 7K# show logging ip access-list cache

Source IP        Destination IP     S-Port  D-Port    Interface   Protocol

    Hits

--------------------------------------------------------------------------------

10.45.79.253     224.0.0.13         0       0         port-channel11 (103)PIM

         1

100.171.219.253  224.0.0.13         0       0         port-channel11 (103)PIM

         66

10.45.27.252     224.0.0.13         0       0         port-channel11 (103)PIM

         5

10.45.75.253     224.0.0.13         0       0         port-channel11 (103)PIM

         14

10.45.11.253     224.0.0.13         0       0         port-channel11 (103)PIM

         25

Number of cache entries: 5

--------------------------------------------------------------------------------

Regards Vinayak
1 Reply 1

AJ Cruz
Level 3
Level 3

You can only log what gets sent to the CPU.

Sent from Cisco Technical Support iPad App

Review Cisco Networking for a $25 gift card