Analysing the access list

[nanduriks]

Hi friends,

I applied a telnet restrection for an IP for the the entire subnet . FOund some matches against the list . How can i find which IP tried to access the filtered IP ? I wanted to apply the access list subnet wise only instead of each IP. can anybody Help me pl.

[thisisshanky · Accepted solution]

Give a keyword "log" at the end of each access-list entry so that matches made by packets against each entry will be logged. When a entry is matched and denied...a syslog message would pop up on the router console. You can collect all the log messages in a syslog server or by buffering it into memory and view it later. ( Use "logging buffered" for this)