Cisco 11503 Administration Guide - Page 131
Logging ACL Activity
UPC - 746320664958
View all Cisco 11503 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 131 highlights
Chapter 4 Using the CSS Logging Features Configuring Logging for a Subsystem • level level - The log level for the message. Enter one of the levels, from 0 to 7, as shown in Table 4-4. To see a list of levels, enter: cliLogMessage subsystem name "message" level ? Logging ACL Activity When you configure the CSS to log ACL activity, the CSS logs the event of the packet matching the clause and ACL. The CSS sends log information to the location you specified in the logging command. Before you configure logging for a specific ACL clause, ensure global ACL logging is enabled. To globally enable ACL logging, use the logging subsystem acl level debug-7 command in configuration mode. To configure logging for an ACL clause: 1. Enter the ACL mode for which you want to enable logging. (config)# acl 7 (config-acl[7])# 2. Enable logging for: • A new clause, by entering the log option at the end of the clause. For example: (config-acl[7])# clause 1 deny udp any eq 3 destination any eq 3 log • An existing clause, by using the clause log enable command: (config-acl[7])# clause 1 log enable To disable ACL logging for a specific clause, enter: (config-acl[7])#) clause 1 log disable To globally disable logging for all ACL clauses, enter: (config)# no logging subsystem acl OL-5647-02 Cisco Content Services Switch Administration Guide 4-11