Troubleshooting guide

3. Troubleshooting Functional Failures During Operation
155
3.26 Access list logging problems
3.26.1 Actions to be taken when access list logs are not output
If an access list log cannot be output when access list logging is used, take the following action.
Table 3-83: Action to take when access list logs are not output
#1
When executing the
dump bsu command, do not execute the next command until a log entry
is output that indicates that collection of a memory dump file is complete. Also, executing the
dump access-log or dump bsu command a second time deletes the memory dump file
collected by the first execution of the command. Therefore, save the file before executing the
command a second time to prevent the file from being deleted.
#2
When executing the
dump psp command, do not execute the next command until a log entry
is output that indicates that collection of a memory dump file is complete. Also, executing the
dump access-log or dump psp command a second time deletes the memory dump file
collected by the first execution of the command. Therefore, save the file before executing the
command a second time to prevent the file from being deleted.
No. Items to check and commands Action
1 Check the log output status of access list logging.
• Execute the
show access-log command and check the status
displayed for
logging of Access list logging
Information.
If the displayed status is
disable, use the
debug access-log command to change
the log output setting.
If the displayed status is enable, go to No.
2.
2 Check the capacity limit status of access list logging.
• Execute the show access-log command, and check the value
of the flow table full item of Access list logging
Statistics.
If the value is not 0, packets exceeding the
number of items of access list log
information that can be handled might
have been discarded by filtering.
If the value is
0, go to No. 3.
3 Check the operation status of access list logging.
• Execute the
show access-log command, and check the value
of the rate-limit discard item of Access list logging
Statistics.
If the value is not 0, packets might have
been discarded because packets exceeding
the setting of
rate-limit have been
received.
If the value is
0, go to No. 4.
4 Check the setting conditions for the filtering configuration. If the settings are not correct, modify the
configuration.
If the settings are correct, go to No. 5.
5 Collect analysis information.
• For AX6700S series switches:
Execute the
show tech-support command, dump
access-log command, and dump bsu command twice in this
order.
#1
• For AX6600S or AX6300S series switches:
Execute the
show tech-support command, dump
access-log command, and dump psp command twice in this
order.
#2
Send the collected information to the
support division.