H3C V7平台 S10500系列交换机 ACL Logging功能典型配置

需要对符合特定规则的报文，在Logbuffer日志里记录下来。  

本实例对从S10500系列交换机 GigabitEthernet1/1/0/42端口匹配源IP为192.168.1.10的ICMP报文记录日志。

 (1) 配置相关acl，以匹配特定报文

 [H3C] acl number 3333

 [H3C-acl-adv-3333] rule 2 permit icmp source 192.168.1.10 0 logging 

 (2) 下发acl到对应端口G1/1/0/42

 [H3C] int g1/1/0/42

 [H3C-GigabitEthernet1/0/1] packet-filter 3001 inbound 

 (3) 配置报文过滤日志信息的生成与发送周期

 [H3C] acl logging interval 5 (缺省报文过滤日志信息的生成与发送周期为0分钟，即不记录报文过滤的日志)

 (4) 检查输出结果display logbuffer

 %Jan 31 00:38:22:216 2019 Spine ACL/6/PFILTER_STATIS_INFO: -MDC=1-Chassis=1-Slot=1; GigabitEthernet1/1/0/42 (inbound): Packet-filter 3333 rule 2 permit icmp source 192.168.1.10 0 logging counting 7 packet(s).

 %Jan 31 00:43:22:234 2019 Spine ACL/6/PFILTER_STATIS_INFO: -MDC=1-Chassis=1-Slot=1; GigabitEthernet1/1/0/42 (inbound): Packet-filter 3333 rule 2 permit icmp source 192.168.1.10 0 logging counting 3 packet(s).

 %Jan 31 00:48:22:254 2019 Spine ACL/6/PFILTER_STATIS_INFO: -MDC=1-Chassis=1-Slot=1; GigabitEthernet1/1/0/42 (inbound): Packet-filter 3333 rule 2 permit icmp source 192.168.1.10 0 logging counting 2 packet(s).