log message

Unanswered Question
Feb 3rd, 2010
User Badges:

Hi,

There are a lot of log message in catalyst 3750. Grateful if you could advise what action should be taken to fix those messages


Jan 21 09:44:29 HKT: %SEC-6-IPACCESSLOGP: list xxx denied udp 192.168.5.13(137) (Vlan12 yyyyyy.edc5) -> 192.168.5.255(137), 4 packets
Jan 21 09:46:29 HKT: %SEC-6-IPACCESSLOGP: list xxx denied udp 192.168.5.14(138) (Vlan13 eeeeeb.acc2) -> 192.168.5.255(138), 1 packet

Thanks


rdgs

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Leo Laohoo Wed, 02/03/2010 - 20:06
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

Look at your configuration for your access list and remove the "log" comment.  Example:


access-list 101 permit ip host 1.1.1.1 host 2.2.2.2 eq icmp log

Richard Burts Wed, 02/03/2010 - 20:09
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

It is not clear that these log messages represent something that needs to be fixed. These log messages are generated because there is an access (xxx in your message which I assume is some number or some name that you have obscured) which is denying traffic and the access list was configured to log the denied traffic.


Whoverer configured that access list thought that it would be helpful to log that denied traffic. Perhaps they thought that someone would investigate the denied traffic and find a situation that could be improved (perhaps some misconfigured device generating improper traffic) or perhaps they thought it helpful to document invalid traffic (some of my customers do that on outward facing routers so that can understand attempts to access their network). If the messages are not helpful you can edit the access list and remove the log parameter on the lines where it is configured. This will stop these messages in your log.


HTH


Rick

Actions

This Discussion