access-list counters on a 3560

[george_daly]

Hi,

I'm looking into using policy maps and class maps on a 3560 running IOS 12.2(25) with the IP base image.

I've got 2 access-lists. When a packet matches access-list 1 I want it to be policed to bandwidth X, any other traffic should hit access-list 2 which is policed to bandwidth Y.

I *think* everything is working as it should be, but wanted to confirm this by checking the access list counters and/or by looking at debug output.

However I'm not seeing any hits against either access list, I think this is because traffic is being hardware switched.

Same goes for 'debug ip packet X'.

Does anyone know of a way to see hits against access lists or class maps, where the packet is being hardware switched, or of any other useful debug type commands that will achieve my aims?

Many thanks for any replies!

[glen.grant]

For seeing a debug , on the interface you are trying to look at use the no ip route-cache command . Also if telnetting in , do a terminal monitor command . If on the console make sure the logging console command is on .