cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
360
Views
0
Helpful
2
Replies

Extended ACL: deny but not log the deny

vwolgel12
Level 1
Level 1

We have an extended ACL with "deny ip any any log" as the last entry. However, for repeated events like HSRP mutlicast, which we do not permit, we do NOT want to log the HSRP denies b/c we want to reduce our syslog messages. What is the syntax to "deny but NOT log" something like HSRP when we have the "deny ip any any log" as the last line in the ACL.

2 Replies 2

Gregory Camp
Cisco Employee
Cisco Employee

If you want to deny but not log.

access-list 101 deny udp any host 224.0.0.2 eq 1985

Insert that before your deny ip any any log

Thank you! I'll give that a try.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card