[c-nsp] VACL capture versus OAL on 6500s

Mike Johnson harbor235 at gmail.com
Mon Apr 28 09:10:37 EDT 2008


What version of code are you using?

harbor235 ;}


On 4/28/08, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
>
> The release notes state that OAL (Optimised ACL logging) is mutually
> exclusive with VACL capture:
>
> """OAL and VACL capture are incompatible. Do not configure both features
> on the switch. With OAL configured (see the "Optimized ACL Logging with
> a PFC3" section on page 34-4), use SPAN to capture traffic."""
>
> We currently use SPAN to mirror our default route, for URL logging
> purposes, however we've got an imminent capacity upgrade to dual 10GbE
> so we're looking at a different approach - specifically we are
> considering VACL to limit capture to port 80 only.
>
> However we have OAL enabled, though (currently) no logging ACLs. Anyone
> know if this is a fundamentally unsolvable issue (in which case we may
> abandon OAL) or not?
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list