Hit counts against access-list

Answered Question
Mar 2nd, 2009
User Badges:

I added some access lists to my core switch which resolved some access issues. However I don't see any counts against that ACL ... what are the rules regarding when you see hit counts against ACL's ??


Thanks


Brent

Correct Answer by Jon Marshall about 8 years 1 month ago

Easiest way is to check docs on the switch you are using. It will tell you where the acl processing takes place and which keywords stop it being processed in hardware eg. here is the 6500 documentation on this -


http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/acl.html#wp1033602


Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Jon Marshall Mon, 03/02/2009 - 10:15
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Brent


If the acl is processed in hardware you don't get hit counts on the acl. For example a 6500 with Sup720 processes most acl's in hardware.


Jon

Brent Rockburn Mon, 03/02/2009 - 10:17
User Badges:

Hey Thanks for the quick response. That must be it.


Is there anyway to tell if it's doing this? Processing in the hardware I mean.

Correct Answer
Jon Marshall Mon, 03/02/2009 - 10:51
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Easiest way is to check docs on the switch you are using. It will tell you where the acl processing takes place and which keywords stop it being processed in hardware eg. here is the 6500 documentation on this -


http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/acl.html#wp1033602


Jon

Actions

This Discussion