3750 Access list

[patil.ajay]

I have implemented following configuration on my live setup. I am not facing any traffic related problems.

But my only concern is that I can`t see any hit counts on below access list.

Please find attachment for refernce diagram:

Configuration on switch A(Its a 3750X series switch):
there are 2 SVIs 2, 3 & 4.

access-list 102 permit tcp 10.10.20.0 0.0.0.255 10.10.100.0 0.0.0.255 gt 1023

access-list 102 deny any any log

interface vlan 3

ip access-group 102 out

..................

Please help me to understand why we are not able to get any hit counts, even though there is continous traffic flow.

[cadet alain · Accepted solution]

Hi,

this is explained here:http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_58_se/configuration/guide/swacl.html#wp1173860

"When you enter the 

show ip access-lists
 privileged EXEC command, the match count displayed does not account for  packets that are access controlled in hardware. Use the show access-lists hardware counters privileged EXEC command to obtain some basic hardware ACL statistics for switched and routed packets. "

Regards

Alain

Don't forget to rate helpful posts.

[patil.ajay]

Thanks for the document.

Well, i will observer and analyze the same.