access-list

[spivy66]

Hello,

I'm kind of new with cisco so please bare with me. I'm working with access-list and I setup a standard list . when I run the command sh access-list it shows me the rule i created and the log count but not the logs in detail...this is what it looks like... I will also note i appiled it to a interface

17.2mask#sh access-list Replication
Standard IP access list Replication
deny 172.28.2.0, wildcard bits 0.0.0.255 log check=6333


Does anyone one have good documention on the access-list where I would understand it better?.The doumention i'm finding it not very clear.thank you ...

 

[KiscoKid]

This is a good place to start:

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804fde4d.html

To see your matched entries on the access list, issue the 'show log' command.

 

[spivy66]

Thank you for the reply but when i issue that command I get this

17.2mask#show log
Syslog logging: enabled (0 messages dropped, 0 messages rate-li
0 overruns)
Console logging: level debugging, 470 messages logged
Monitor logging: level debugging, 0 messages logged
Buffer logging: disabled
Logging Exception size (4096 bytes)
Trap logging: level informational, 474 message lines logged



where is that details to the messages?

 

[vipergg]

You have buffer logging disabled , you need to enable buffer logging thats why there is nothing in there .

 

[KiscoKid]

He's right. The command:

logging buffered 4096 debugging

will enable internal logging again.

However you or someone else has turned this off for a reason and enabled Syslog as well. You may well find all your access-list logs if you inspect your Syslog log files