Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

debug ip inspect policy: police

I tried to run the above debug to get insight into zone based policy firewaling and it spiked the router to 99%. Most of what got logged were these rate-limit policy messages such as below. But I don't have anything purposely rate-limited. What are these "police" messages telling me? Thanks.

008998: *Sep 25 00:54:56.218 UTC: CBAC-C3PL*: Police: calling rate_limit

008999: *Sep 25 00:54:56.218 UTC: CBAC-C3PL*: Police: calling rate_limit

009000: *Sep 25 00:54:56.218 UTC: CBAC-C3PL*: Police: calling rate_limit

009001: *Sep 25 00:54:56.218 UTC: CBAC-C3PL*: Police: calling rate_limit

009002: *Sep 25 00:54:56.218 UTC: CBAC-C3PL*: Police: calling rate_limit

009003: *Sep 25 00:54:56.222 UTC: CBAC-C3PL*: Police: calling rate_limit

009004: *Sep 25 00:54:56.222 UTC: CBAC-C3PL*: Police: calling rate_limit

009005: *Sep 25 00:54:56.222 UTC: CBAC-C3PL*: Police: calling rate_limit

009006: *Sep 25 00:54:56.222 UTC: CBAC-C3PL*: Police: calling rate_limit

009007: *Sep 25 00:54:56.222 UTC: CBAC-C3PL*: Police: calling rate_limit

009008: *Sep 25 00:54:56.222 UTC: CBAC-C3PL*: Police: calling rate_limit

009009: *Sep 25 00:54:56.222 UTC: CBAC-C3PL*: Police: calling rate_limit

009010: *Sep 25 00:54:56.226 UTC: CBAC-C3PL*: Police: calling rate_limit

2 REPLIES
Silver

Re: debug ip inspect policy: police

To display messages about Cisco IOS firewall events, use the debug ip inspect command in privileged EXEC mode. To disable debugging output, use the no form of this command.

Community Member

Re: debug ip inspect policy: police

Thanks for the reply smahbub. The problem is not how to turn on the debug - the problem is that debug spiked my CPU. And it spiked it with those messages that I don't know what they are.

178
Views
0
Helpful
2
Replies
CreatePlease to create content