Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ACL question (1)

Please explain the LOG syntax in the following command:

access-list access-list-number

{deny | permit}

source [source-wildcard] [log]

Thanx

reza

8 REPLIES
Purple

Re: ACL question (1)

The use of the 'log' keyword causes an informational logging message about the packet that matches the entry to be sent to the console. (The level of messages logged to the console is controlled by the 'logging console' command.)

The message includes the access list number, whether the packet was permitted or denied, the source address, and the number of packets. The message is generated for the first packet that matches, and then at 5-minute intervals, including the number of packets permitted or denied in the prior 5-minute interval.

Hope that helps - pls rate the post if it does.

Regards,

Paresh

New Member

Re: ACL question (1)

Thanks for your reply. please explain the "logging message" command with an example.

Thanx

Reza

Purple

Re: ACL question (1)

Hi Reza,

The 'logging console [severity-level]' command determines the nature of the messages logged to the console. The severity levels available are:

emergencies (0)

alerts (1)

critical (2)

errors (3)

warnings (4)

notifications (5)

informational (6)

debugging (7)

By default, all levels up to level 7 (debugging) are sent to the console. So, for example, if you configure 'logging console 6', debug messages will not be displayed (only level 0-6 will be displayed).

For your ACL logging, you need to use a level of 6 or 7, otherwise no information is logged or displayed.

Therefore, if you are using defaults, you should be fine and will see the ACL logging messages.

Hope that helps - pls rate the post if it does.

Regards,

Paresh

New Member

Re: ACL question (1)

From your reply; emergencies are always displayed however I mention for example the 6 mode. Right?

Purple

Re: ACL question (1)

Yes, emergency messages are always displayed.

If you use 6, your ACL logs will be displayed.

Hope that helps...

Pls remember to rate posts.

Paresh.

New Member

Re: ACL question (1)

Now when I issue the "no logging console" command and use the debug command, does debugging output appears on the console?

Purple

Re: ACL question (1)

"no logging console" will completely disable logging to the console - even emergency messages will not be displayed.

Paresh

New Member

Re: ACL question (1)

Thanks for your good reply.

111
Views
0
Helpful
8
Replies
CreatePlease to create content