Use of log parameters in ACL

Source: Internet
Author: User
Tags flushes

Defining the log parameters in the ACL in cisco is easy to use. If the log parameters are added, all entries that comply with the rules will send a log message. If they are the same data packets, logs will be sent at a certain interval. It is impossible for each log to be sent. The log level is information,
 
However, if I use the operation defined on user maual of cisco 3750 to send packets that comply with the rules, the log information will never be seen. I don't know why. Please kindly advise:
 
This is the description and case on cisco 3750:
 
 
 
ACL Logging
Two variations of logging are supported on router ACLs. The log keyword sends an informational
Logging message to the console about the packet that matches the entry; the log-input keyword between des
The input interface in the log entry.
In this example, standard named access list stan1 denies traffic from 10.1.1.0 0.0.0.255, allows traffic
From all other sources, and between des the log keyword.
Switch (config) # ip access-list standard stan1
Switch (config-std-nacl) # deny 10.1.1.0 0.0.255 log
Switch (config-std-nacl) # permit any log
Switch (config-std-nacl) # exit
Switch (config) # interface gigabitethernet1/0/1
Switch (config-if) # ip access-group stan1 in
Switch (config-if) # end
Switch # show logging
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
Console logging: level debugging, 37 messages logged
Monitor logging: level debugging, 0 messages logged
Buffer logging: level debugging, 37 messages logged
File logging: disabled
Trap logging: level debugging, 39 message lines logged
Log Buffer (4096 bytes ):
00: 00: 48: NTP: authentication delay calculation problems
<Output truncated>
00: 09: 34: % SEC-6-IPACCESSLOGS: list stan1 permitted 0.0.0.0 1 packet
00: 09: 59: % SEC-6-IPACCESSLOGS: list stan1 denied 10.1.1.15 1 packet
00: 10: 11: % SEC-6-IPACCESSLOGS: list stan1 permitted 0.0.0.0 1 packet
 
 
 
Experiment configuration on 3750:
 
Configure an ACL and apply it to interface f0/1.
 
Switch # show ip access-lists
Standard IP access list 1
10 deny any log
Standard IP access list stan1
10 deny 10.1.1.0, wildcard bits 0.0.0.255 log
20 permit any log
 
Send the data packet matching the rule on interface 1 and view the log information:
 
Switch # show logg
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 0 flushes, 0 overruns, xml enabled, filtering disabled)
 
No Active Message Discriminator.
 
 
 
No Inactive Message Discriminator.
 
 
Console logging: level informational, 39 messages logged, xml enabled,
Filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
Filtering disabled
Buffer logging: level informational, 39 messages logged, xml enabled (0 messages logged ),
Filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Persistent logging: disabled
 
No active filter modules.
 
Trap logging: level informational, 42 message lines logged

Log Buffer (4096 bytes ):
 
The log is always empty, and there is no information. The ACL has been applied, but the log information is not sent. Please give us some advice. Is there an error in configuration?
 
The author loves you for 10 thousand years

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.