Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

access list permit matching

on 3560

there is access list and on access list there are permit statements. when i check with show access-list i do not see any matches.. But if i make it deny there are matches... Is there any bug?

Thank you.

3 REPLIES
Hall of Fame Super Blue

Re: access list permit matching

akyuznet45 wrote:

on 3560

there is access list and on access list there are permit statements. when i check with show access-list i do not see any matches.. But if i make it deny there are matches... Is there any bug?

Thank you.

No there is no bug. Permit statements are dealt with in hardware so you do not see any hits on the acl. However deny statements are also dealt with in hardware usually. Do you have the "log" keyword at the end of the deny statements ?

Jon

New Member

Re: access list permit matching

I did not understand your comment Marshall. Which one is on the hardware? permit or deny? we are getting only problem permit layer 4 access list.. we do not have matching problem with permit L3 access lists...

Thank you.

Re: access list permit matching

Aky,

Jon meant to see/view the matched packets by the access-list.

Even i understood your question in that way first..-:)

Seems you cannot see the access list created when doing a sh access-list rite ?

If its visible in the sh run then it seems to be a problem i never encountered.

Try the command sh access-list 1 (with the no)

If nothing works then it sounds buggy..

264
Views
0
Helpful
3
Replies
CreatePlease to create content