cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
225
Views
4
Helpful
3
Replies

pix - log through acl

jaymare33
Level 1
Level 1

Hi, is it possible to log information about outgoing packets from a specific ip address.. mayby through acl ?? I want to be sure there is no ingoing or outgoing traffic to or from this ip address.. because traffic should remain inside (but before I stop it I want to be sure there is really no inside-outside traffic)

3 Replies 3

Patrick Iseli
Level 7
Level 7

Yes you can do this with an access-list.

Scenario: Log all communication of a specific IP Source on the internal interface to a syslog server and all other traffic is logged in warning level.

example:

access-list inside-acl permit ip 192.168.1.10 any log informational interval 120

access-list inside-acl permit ip any any

access-group inside-acl in interface inside

#Note that you need to ajust the acl with your existing one.

#Syslog setup:

logging host inside 192.168.1.100

logging trap info

sincerely

Patrick

ERROR: invalid IP address any

I already have:

access-list inside-acl permit ip any any

..but when I configure..

access-list inside-acl permit ip 192.168.1.10 any log informational interval 120

it gives me that error, why?

of course I changed 192.168.1.10 using the real ip

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: