Link to home
Start Free TrialLog in
Avatar of captclam
captclamFlag for United States of America

asked on

Cisco - Debug an access list

I would like to use a simple command to debug access-lists on a Cisco router.  The command is "debug ip packet detail 105" which will set debugging to access-list 105.  Here is my problem, how to I apply the same command if the access-list is defined by a word, not a list number?  Or is there a command that displays the access-list number of an access-list defined using a word?

Thanks....
Avatar of Jimmy Larsson, CISSP, CEH
Jimmy Larsson, CISSP, CEH
Flag of Sweden image

There is no debug-command that "debugs" access-lists. What is it you want to debug? Most troubleshooting of access-list are done by looking at the hitcounts for each line in the acl.

What you do when you do "deb ip packet  is to debug transit packets thru the router but to only show traffic specified in the acl. That command doesnt troubleshoot the acl, that command troubleshoot traffic and the acl is a tool for specifying which traffic to look at. That command doesnt support named access-lists.

/Kvistofta
Avatar of captclam

ASKER

I understand what you are saying about debugging, so let me try asking this question.
Does a Cisco router assign a number to an access-list created by "ip access-list extended LIST_NAME"?  So does the access-list "LIST_NAME" have a number as well?  If so how can I see this number.
 
Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Jimmy Larsson, CISSP, CEH
Jimmy Larsson, CISSP, CEH
Flag of Sweden image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial