Why ACL hitcnt number do not change after ping other side user in asa vpn
Posted on 2014-10-22
I have a question when i am doing lan to lan vpn. After i setup the vpn, one side user can ping other side user, but i notice after i show access-list in asa, the result show hitcnt number do not change. i do not know why it happen like that since the traffic goes through that acl.
Please see the following:
ASA# sh access-list
access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096)
access-list Sales; 8 elements; name hash: 0x98ffc0
access-list Sales line 1 extended permit ip 10.154.179.0 255.255.255.0 10.0.0.0 255.0.0.0 (hitcnt=3) 0x98950ed