Is there some way to get the MAC address of packets blocked by an
input access list on an ASR?  The "log-input" keyword isn't working
for me on an ASR.

On a 3845 with an input access list that ends with
  deny   ip any any log-input
I get the mac address in addition to the IP address - eg:
  %SEC-6-IPACCESSLOGSP: list foo denied igmp 10.10.10.7 (G0/3/0
0004.96xx.xxxx) -> 224.0.0.2

But the same input access list on an ASR doesn't show the mac-address:
  %FMANFP-6-IPACCESSLOGNP: F0: fman_fp_image: list foo denied 2
10.10.10.7 G0/0/0-> 224.0.0.1

TIA,
Lee
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to