KB.15.15

Example 103 Content of messages generated by an ACL-deny action

Example Syslog report of the first deny event detected by the switch for this ACE.

ACL 12/01/08 10:04:45 List NO-TELNET, seq#10 denied tcp

2001:db8:0:1ae::1a:3(1612)

->2001:db8:0:1ad::1a:2(23) on vlan 1, port A7

Example of subsequent deny events detected by the switch for the same ACE.

Dec 1 10:04:45 2008:db8:0:1ad::1a:1 ACL:

ACL 12/01/08 10:04:45 : ACL NO-TELNET seq#10 denied 6 packets

IPv6 counter operation with multiple interface assignments

NOTE: The examples of counters in this section use small values to help illustrate counter operation.

The counters in real-time network applications are generally much more active and show higher

values.

Where the same IPv6 ACL is assigned to multiple interfaces, the switch maintains a separate

instance of each ACE counter in the ACL. When there is a match with traffic on one of the ACL's

assigned interfaces, only the affected ACE counters for that interface are incremented. Other

instances of the same ACL applied to other interfaces are not affected.

158 IPv6 Access Control Lists (ACLs)