2-6
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
access-list
access-list
To enable smart logging for a standard or extended IP access list, use the access-list command in global
configuration mode with the smartlog keyword. Matches to ACL entries are logged to a NetFlow
collector. To disable smart logging for the access list, use the no form of this command.
access-list access-list-number {deny | permit} source [source-wildcard] [log [word] | smartlog]
access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit}
protocol source source-wildcard destination destination-wildcard [precedence precedence]
[tos tos] [time-range time-range-name] [fragments] [log [word] | log-input [word] | smartlog]
Syntax Description
Defaults ACL smart logging is not enabled.
Command Modes Global configuration
Command History
Usage Guidelines For the complete syntax description of the access-list command without the smartlog keyword, see the
Cisco IOS Security Command Reference.
When an ACL is applied to an interface, packets matching the ACL are denied or permitted based on the
ACL configuration. When smart logging is enabled on the switch and an ACL includes the smartlog
keyword, the contents of the denied or permitted packet are sent to a Flexible NetFlow collector.
You must also enable smart logging globally by entering the logging smartlog global configuration
command.
Only port ACLs (ACLs attached to Layer 2 interfaces) support smart logging. Router ACLs or VLAN
ACLs do not support smart logging. Port ACLs do not support logging.
When an ACL is applied to an interface, matching packets can be either logged or smart logged, but not
both.
To remove disable smart logging of an access list, enter access-list configuration mode and enter the no
deny {source [source-wildcard] | host source | any} [smartlog] command or the no permit {source
[source-wildcard] | host source | any} [smartlog] command.
You can verify that smart logging is enabled in an ACL by entering the show ip access list privileged
EXEC command.
smartlog (Optional) Sends packet flows matching the access list to a NetFlow
collector when smart logging is enabled on the switch.
Release Modification
12.2(58)SE The smartlog keyword was added.
To Next Page
Loading...
Need help?
General
