Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

'Not applying Output Acl for packet tcp srcHost x.x.x.x dstHost x.x.x.x'?

This type of message suddently appeared on a Layer 3 Cat4. What could be the cause?

thanks

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: 'Not applying Output Acl for packet tcp srcHost x.x.x.x dstH

This is from Cisco,

1. %C4K_PKTPROCESSING-5-NOTAPPLYINGACL: Not applying [input/output] Acl for packet [packet-info]

This message indicates that the software has not taken the ACL actions because it could not determine the correct ACL entry that is indicated by the hardware. The hardware-provided index of the ACL content-addressable memory (CAM) indicates that the software needs to take the actions for the entry at that index. If the packet was queued in the hardware before being processed by the software, the index is out of date.

Recommended Action: This message is informational only. No action is required.

More explanation required thou....

2 REPLIES
Cisco Employee

Re: 'Not applying Output Acl for packet tcp srcHost x.x.x.x dstH

Do the src and dst host addresses of traffic hitting the switch match an ACL you added recently? In this case match on tcp any any? Or any other specific ACL entry in a message? It may be that the ACL didn't get programmed into HW. Try removing and reapplying the ACL.

New Member

Re: 'Not applying Output Acl for packet tcp srcHost x.x.x.x dstH

This is from Cisco,

1. %C4K_PKTPROCESSING-5-NOTAPPLYINGACL: Not applying [input/output] Acl for packet [packet-info]

This message indicates that the software has not taken the ACL actions because it could not determine the correct ACL entry that is indicated by the hardware. The hardware-provided index of the ACL content-addressable memory (CAM) indicates that the software needs to take the actions for the entry at that index. If the packet was queued in the hardware before being processed by the software, the index is out of date.

Recommended Action: This message is informational only. No action is required.

More explanation required thou....

694
Views
0
Helpful
2
Replies