Table of Contents
Advertisement
Logging Rules
Logging a rule is useful for determining the source of firewall attacks. To specify that the switch must log
information about flows that match the specified policy rule, use the policy rule command with the log
option. For example:
-> policy rule rule5 log
To stop the switch from logging information about flows that match a particular rule, use no with the log
keyword. For example:
-> policy rule rule5 no log
When logging is active for a policy rule, a logging interval is applied to specify how often to look for
flows that match the policy rule. By default, the interval time is set to 30 seconds. To change the log inter-
val time, use the optional interval keyword with the log option. For example:
-> policy rule rule5 log interval 1500
Note that setting the log interval time to 0 specifies to log as often as possible.
Deleting Rules
To remove a policy rule, use the no form of the command.
-> no policy rule rule1
The rule is deleted after the next qos apply.
page 21-46
OmniSwitch AOS Release 7 Network Configuration Guide
March 2011
Advertisement
Table of Contents
