Hello,
I recently created a PACL and applied it on the egress of a 4500 L3 switch. This application included the "deny any any log". According to the document listed below, which is applicable to my current platform, egress PACLs are supported as long as the hardware can support it. It also states that ACL logging on egress is not permitted. However, my PACL is working properly and logging is working as it should. The PACL is staying active, counters are incrementing and the logging is doing its job.
I cannot figure out why logging is working based on documentation. Can anyone point me to a document that shows that an ACE log parameter is supported on PACLs applied in the outbound direction or explain why it would be working when it shouldn't be according to Cisco?
See the section below:
"
When configuring PACLs, consider these guidelines:
- There can be at most one IPv4, one IPv6, and one MAC access list applied to the same Layer 2 interface per direction.
....
- If insufficient hardware resources exist to program the PACL, the output PACL is not applied to the port, and you receive a warning message.
"
.jpg "Hall of Fame Expert"){kind=icon}
