On Tue, May 8, 2007 3:51 pm, Ian MacKinnon wrote: > I have a simple access list > ip access-list extended testlogging > permit ip any any Surely without 'permit ip any any log' you don't have any ACL logging, optimised or otherwise? Regards, Tim.