
FIREWALL-POLICY 14 - 15
14.1.9 logging
firewall-policy
Enables firewall enhanced logging
Supported in the following platforms:
• RFS7000
• RFS6000
• RFS4000
• AP71xx
• AP650
• AP6511
• AP6532
Syntax
logging [icmp-packet-drop|malformed-packet-drop|verbose]
logging [icmp-packet-drop|malformed-packet-drop] [all|rate-limited]
Parameters
Example
rfs7000-37FABE(config-fw-policy-default)#logging rawip-packet-drop all
rfs7000-37FABE(config-fw-policy-default)#
rfs7000-37FABE(config-fw-policy-test)#logging malformed-packet-drop rate-limited
rfs7000-37FABE(config-fw-policy-test)#
rfs7000-37FABE(config-fw-policy-test)#logging verbose
rfs7000-37FABE(config-fw-policy-test)#
[icmp-packet-drop|
rawip-packet-drop] [all|rate-
limited]
• icmp-packet-drop – Logs dropped ICMP packets failing sanity checks
• malformed-packet-drop – Logs dropped IP packets failing sanity
checks
The following parameters are common for the above:
• all – Logs all message instances
• rate-limited – Enables rate-limiting. The granularity of
rate -limiting is 20 seconds
• verbose – Enables verbose logging (applicable to selected
platforms only)
Comentarios a estos manuales