Question about ACL hashing

[RonHarnik]

Hi folks,

I've got a questiong about ACL hashing on routers and ASAs, on the router I can use the command:

ip access-list logging hash-generation

And as far as I understand the ASA generates a hash for its ACLs by default, is this true? is there some equivalent command on the ASA for ACL hash generation?

Thanks!

[jgoldyn]

Ron,

The ASA does generate hash codes automatically.

Here is sample output from the show access-list command.

access-list outside1_access_in line 2 extended permit ip host 1.2.2.1 host 192.168.100.1 (hitcnt=0) 0x4666ea26

more information can be found at the link below.

http://www.cisco.com/en/US/docs/security/asa/syslog-guide/logmsgs.html

• hash codes—Two are always printed for the object group ACE and the constituent regular ACE. Values are determined on which ACE that the packet hit. To display these hash codes, enter the

Thanks!