Options

QoS ACL matching question

GT-RobGT-Rob Member Posts: 1,090
Hey all

Not sure if this is supposed to be like this, but having a hard time confirming it without labbing it up (which I may do).


Under a sh access-list, it generally shows you how many packets have been matched on an ACL. Does this also happen for ACLs used in QoS?

For example:

Standard IP access list 99
20 permit 10.204.15.41 (1120 matches)
40 permit 10.252.0.0, wildcard bits 0.0.255.255 (2745532 matches)
50 deny any
Extended IP access list QOS_VOICE_DATA
10 permit udp any any range 16384 32767


And assume the ACL qos_voice_data is used in a class map/policy map, and is apply to an interface where a phone is. (for marking).


Why don't I see any matches on my QOS ACL?



*update*


seems you can't turn logging on an ACL that is used in a class-map

class-map VOICE : access-list with 'log' not supported, pls remove 'log' from access-list otherwise class-map VOICE will not work properly

Comments

  • Options
    cisco_troopercisco_trooper Member Posts: 1,441 ■■■■□□□□□□
    Hit counter works on this ACL from a 3825 I have:
    HOST#show ip access-lists
    
    Extended IP access list QOS_TRANSACTIONAL_DATA
        50 permit ip host AAA.AAA.AAA.AAA host BBB.BBB.BBB.BBB (1996696163 matches)
        100 permit ip host BBB.BBB.BBB.BBB host AAA.AAA.AAA.AAA (2731311087 matches)
        150 permit ip host CCC.CCC.CCC.CCC host BBB.BBB.BBB.BBB (2436902 matches)
        200 permit ip host BBB.BBB.BBB.BBB host CCC.CCC.CCC.CCC (2298178 matches)
        210 permit ip host DDD.DDD.DDD.DDD host BBB.BBB.BBB.BBB (6643973 matches)
        220 permit ip host BBB.BBB.BBB.BBB host DDD.DDD.DDD.DDD (4885692 matches)
        250 deny ip any any (396805938 matches)
    
Sign In or Register to comment.