cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1636
Views
5
Helpful
1
Replies

FWSM Access-List hit counter

barney.pause
Level 1
Level 1

Hi,

When I do a sh access-list on a FWSM running 4.0(5), some of the ACE show a hitcount of * (hitcnt=*) instead of a number. What does that means?

Thanks

1 Accepted Solution

Accepted Solutions

mirober2
Cisco Employee
Cisco Employee

Hi Barney,

You'll see the * when ACL optimization is enabled on the FWSM. The * indicates that the rule was merged with another rule(s) due to the optimization, which would make the hitcount for that specific rule inaccurate on its own.

Hope that helps.

-Mike

View solution in original post

1 Reply 1

mirober2
Cisco Employee
Cisco Employee

Hi Barney,

You'll see the * when ACL optimization is enabled on the FWSM. The * indicates that the rule was merged with another rule(s) due to the optimization, which would make the hitcount for that specific rule inaccurate on its own.

Hope that helps.

-Mike

Review Cisco Networking products for a $25 gift card