Hi Jeffrey, The MAC address of the packet will not be visible in the ACL logs. You can see the port where the logged packet was received, then you can check the learnt MACs on the port to narrow it down.
Check the following link for further details about ACL logging on Nexus: https://supportforums.cisco.com/community/netpro/network-infrastructure/switching/blog/2010/11/18/nexus-7000-acl-logging-oal Best regards, Andras On Mon, Jun 24, 2013 at 3:29 PM, Jeffrey G. Fitzwater <[email protected]>wrote: > In IOS when we had an L3 ACL with "deny log-input" the log entry would > show the VLAN and MAC SRC for ACE hit…. > > %SEC-6-IPACCESSLOGP: list router-in denied udp n.n.n.n(137) (Vlan176 > 00de.adee.675a) -> n.n.n.n(137), 67 packets > > > But in NX-OS this does not appear possible with 6.1.2. > > > > FIXES in NX-OS 6.2.1 > > > > I see from bug doc that in NX-OS 6.2.1 logging will now show vlan name, > and if it was from a DENY or PERMIT action; But no mention if the SRC MAC > is part of these changes. > https://tools.cisco.com/bugsearch/bug/CSCth67151 > https://tools.cisco.com/bugsearch/bug/CSCte69784 > > > Does anybody know if there will be a way to see the SRC MAC when a DENY > LOG or PERMIT log ACE is hit in NX-OS 6.2.1? > > > > Thanks for any help. > > > > > Jeff FItzwater > OIT Network Systems > Princeton University > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
