34-6
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 34 Understanding Cisco IOS ACL Support
Optimized ACL Logging with a PFC3
Configuring OAL
These sections describe how to configure OAL:
•
Configuring OAL Global Parameters, page 34-6
•
Configuring OAL on an Interface, page 34-7
•
Displaying OAL Information, page 34-7
•
Clearing Cached OAL Entries, page 34-7
Note
•
For complete syntax and usage information for the commands used in this section, refer to the
Cisco
IOS Master Command List
, Release 12.2SX.
•
To provide OAL support for denied packets, enter the
mls rate-limit unicast ip icmp unreachable
acl-drop 0
command.
Configuring OAL Global Parameters
To configure global OAL parameters, perform this task:
When configuring OAL global parameters, note the following information:
•
entries
number_of_entries
:
–
Sets the maximum number of entries cached.
–
Range: 0–1,048,576 (entered without commas).
–
Default: 8192.
•
interval
seconds
:
–
Sets the maximum time interval before an entry is sent to be logged. Also if the entry is inactive
for this duration it is removed from the cache.
–
Range: 5–86,400 (1440 minutes or 24 hours, entered without commas).
–
Default: 300 seconds (5 minutes).
•
rate-limit
number_of_packets
:
–
Sets the number of packets logged per second in software.
–
Range: 10–1,000,000 (entered without commas).
–
Default: 0 (rate limiting is off and all packets are logged).
Command
Purpose
Router(config)#
logging ip access-list cache
{{
entries
number_of_entries
} | {
interval
seconds
} | {
rate-limit
number_of_packets
} | {
threshold
number_of_packets
}}
Sets OAL global parameters.
Router(config)#
no logging ip access-list cache
{
entries
|
interval
|
rate-limit
|
threshold
}
Reverts OAL global parameters to defaults.
