ANNOUNCEMENT - The community will be down for maintenace this Thursday August 13 from 12:00 AM PT to 02:00 AM PT. As a precaution save your work.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
419
Views
0
Helpful
1
Replies
Highlighted

ACL logging on N1KV issue

We have an ACL created and applied to a port-profile on N1KV

We are getting hits on this ACL, but the actual denies are not getting logged on VSM or our syslog server. If we check on the VEM we can see the details while the flow is active. Example:

vem ACL.jpg

Hovewer, on VSM, it shows nothing, but the hit counter increasing:

vsm ACL.jpg

VEM acllog config:

vem acllog.jpg

VSM acllog config (note, we tried to change acllog level from default 2 to 6 using "loggong level acllog 6" to no avail):

vsm acllog.jpg

What do we need to do to start logging ACL events locally and to the external syslog?

Thanks.

1 REPLY 1
Highlighted
Beginner

ACL logging on N1KV issue

Hello Dmitri,

The Cisco Nexus 1000v sources ACL Logs from the VEMs themselves.  Therefore, if your syslog server is, for example, Cisco LMS, it is configured to see syslogs from one IP - that of the VSM VIP for the N1KV switch. 

You will need to setup a syslog server that can view syslogs sourcing from the IPs of the VEMs, which are the IPs of your ESXi hosts.

Content for Community-Ad