Dell SmartFabric OS10 User Guide Release 10.5.3

IP ACL logging

The IP ACL logging feature allows you to monitor the user-created ACL flows and log packets that match ACEs applied on an interface in inbound direction. To control the volume of logs, specify the threshold after which a log is created and the interval at which the logs must be created.

You can specify the threshold after which a log is created and the interval at which the logs must be created. The threshold defines how often a log message is created after an initial packet match. The default threshold is 10 messages. This value is configurable, and the range is from 1 to 100 messages.

By default, the interval is set to 5 minutes and logs are created every 5 minutes. During this interval, the system continues to examine the packets against the configured ACL rule and permits or denies traffic, but logging is halted temporarily. This value is configurable, and the range is from 1 to 10 minutes.

For example, if you have configured a threshold value of 20 and an interval of 10 minutes, after an initial packet match is logged, the 20th packet that matches the ACE is logged. The system then waits for the interval period of 10 minutes to elapse, during which time no logging occurs. Once the interval period elapses, the 20th packet that matches the ACE is logged again.