02-28-2010 02:57 AM - edited 03-06-2019 09:55 AM
Is there any command that disables the logging at once regarding access lists?
Thank you.
Solved! Go to Solution.
03-01-2010 06:29 AM
You want to disable all logging on the firewall (assuming it is an ASA)??? If yes, you can do no logging enable to disable all logging. The output should look something like this.
ASA3# sh logging
Syslog logging: disabled
HTH,
jerry
02-28-2010 10:45 PM
Is there any command that disables the logging at once regarding access lists?
Thank you.
Hi,
By default, logging message 106023 (default severity level 4, warnings) is generated when a deny access list entry is matched with a traffic flow. Only the overall ACL is listed in the message, with no reference to the actual denying ACL entry.
You can log messages when specific access control entries (ACEs, or individual permit/deny statements within an ACL) permit or deny a traffic flow by adding the log keyword to an ACE.
You can set the logging severity level on a per-ACE basis if needed. Otherwise, severity level 6 is the default.
Firewall(config)# access-list acl_name [extended] {permit | deny} ... log [level] [interval seconds]
Enter the access list entry normally, but add the log keyword at the end. If you want to log activity on this entry at a severity level other than 6, specify the level (1 to 7) too.
You can also re-enter the ACE with the log disable keywords to completely disable all ACE logging (both message IDs 106100 and 106023). In this case, the sample command would be re-entered as
Firewall(config)# access-list acl_out permit tcp any host 192.168.199.100 eq www log disable
Hope to Help !!
If helpful do rate the post
Ganesh.H
03-01-2010 12:39 AM
So, there is no command that disables the logging of the firewall without going through all ACEs and adding the "log disable"?
Thanks for your answer.
03-01-2010 06:29 AM
You want to disable all logging on the firewall (assuming it is an ASA)??? If yes, you can do no logging enable to disable all logging. The output should look something like this.
ASA3# sh logging
Syslog logging: disabled
HTH,
jerry
03-08-2010 09:18 AM
So what's the difference between these two?
access-list acl_out permit tcp any host 192.168.199.100 eq www log disable
and
access-list acl_out permit tcp any host 192.168.199.100 eq www
04-08-2010 07:47 AM
Answer is already given
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide