Configuring Oal - Cisco 7604 Configuration Manual

Optimized ACL Logging with a PFC3

Configuring OAL

These sections describe how to configure OAL:
•
•
•
•
Note •
•
Configuring OAL Global Parameters
To configure global OAL parameters, perform this task:
Command
Router(config)# logging ip access-list cache {{entries
number_of_entries } | {interval seconds } | {rate-limit
number_of_packets } | {threshold number_of_packets }}
Router(config)# no logging ip access-list cache {entries |
interval | rate-limit | threshold}
When configuring OAL global parameters, note the following information:
•
•
•
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
34-6
Configuring OAL Global Parameters, page 34-6
Configuring OAL on an Interface, page 34-7
Displaying OAL Information, page 34-7
Clearing Cached OAL Entries, page 34-7
For complete syntax and usage information for the commands used in this section, refer to the Cisco
IOS Master Command List, Release 12.2SX.
To provide OAL support for denied packets, enter the mls rate-limit unicast ip icmp unreachable
acl-drop 0 command.
entries number_of_entries:
Sets the maximum number of entries cached.
–
Range: 0–1,048,576 (entered without commas).
–
– Default: 8192.
interval seconds:
– Sets the maximum time interval before an entry is sent to be logged. Also if the entry is inactive
for this duration it is removed from the cache.
– Range: 5–86,400 (1440 minutes or 24 hours, entered without commas).
– Default: 300 seconds (5 minutes).
rate-limit number_of_packets:
Sets the number of packets logged per second in software.
–
Range: 10–1,000,000 (entered without commas).
–
Default: 0 (rate limiting is off and all packets are logged).
–
Chapter 34 Understanding Cisco IOS ACL Support
Purpose
Sets OAL global parameters.
Reverts OAL global parameters to defaults.
OL-4266-08