Thx to everyone for clearing that out.
I guess i'll have to wait for some releases until it becomes available...
Just another quick question : can ethanalyser capture traffic *before
*being dropped by an acl?
--
Tassos
Lincoln Dale wrote on 11/08/2010 07:53:
N7K supports ACL logging, ACL time ranges, MAC packet-classify functionality
etc., N5K does not currently support them.
the mistake is that documentation was carried over to N5K from N7K without
being changed.
cheers,
lincoln.
On 11/08/2010, at 5:58 AM, Arie Vayner (avayner) wrote:
Yes, it seems that ACL logging is not yet support on N5K, and CSCth28899
is there to track its introduction (no timeframe yet...)
I am checking why the command reference shows as if it is supported...
Arie
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Arvind .cisconsp
Sent: Tuesday, August 10, 2010 15:31
To: Tassos Chatzithomaoglou
Cc: [email protected]
Subject: Re: [c-nsp] ACL logging on n5k
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method
=fetchBugDetails&bugId=CSCth28899
<http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?metho
d=fetchBugDetails&bugId=CSCth28899>State:
New
Severity: Enhancement
Version: 4.2(1)N1(1)
On Tue, Aug 10, 2010 at 7:09 AM, Tassos Chatzithomaoglou
<[email protected]
wrote:
n5k(config-acl)# deny ip any any ?
<CR>
dscp Match packets with given dscp value
fragments Check non-initial fragments
precedence Match packets with given precedence value
n5k(config-acl)# deny ip any any log
^
% Invalid ip address at '^' marker.
n5k(config-acl)#
"time-range" option is also not available.
There must be something i'm missing...
--
Tassos
Arie Vayner (avayner) wrote on 10/08/2010 13:50:
Seems to be in 4.1(3) too...
http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/command
/reference/rel_4_1/security_cmd_ref.html#wp1279114
Strange...
Arie
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Tassos
Chatzithomaoglou
Sent: Tuesday, August 10, 2010 13:35
To: [email protected]
Subject: Re: [c-nsp] ACL logging on n5k
I'm using 4.1(3)N2(1) and the "log" option is not available.
Should i guess an upgrade is needed, although release notes do not
mention anything?
--
Tassos
Arie Vayner (avayner) wrote on 10/08/2010 12:43:
Tassos,
Looking here:
http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/command
/reference/rel_4_2_1_N2_1/security_cmd_ref.html#wp1279114
I can see the 'log' option listed...
Arie
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Tassos
Chatzithomaoglou
Sent: Monday, August 09, 2010 22:22
To: [email protected]
Subject: [c-nsp] ACL logging on n5k
N5k datasheet says it's supported, but i couldn't find any other
reference.
Is it supported and if yes, how do you enable it?
--
Tassos
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
