Logging ACL Activity

Overview

You can log information about packets that match specific rules in the active access control list (ACL). Each log entry contains the following information:

• Source and destination IP address.
• Protocol ID (RFC 1700 defines these ID numbers).
• Time that the match occurred.
• Index number of the access rule that was matched.
• Forwarding information:
• The priority of the packet if the ACL assigns it a priority and forwards it.
• Forward with no change in priority if the ACL forwards the packet without changing its priority.
• FILTER if the ACL blocks the packet.

To avoid excessive consumption of the switch resources, ACL matches are logged for slow path traffic at specific time intervals. You can set the interval at which the matches are logged. The default setting is two seconds.

ACL matches are not logged for FIRE path or FORE path traffic or for the supervisor ethernet or console port. For more information about the slow path and FIRE and FORE paths, see "Routing Overview" in Chapter 1:�Introduction.

This section includes procedures for the following tasks:

• Enabling ACL Logging
• Setting a Logging Interval