2-248
Catalyst 6500 Series Switch Command Reference—Release8.4
OL-6244-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands
set acllog ratelimit
set acllog ratelimit
To limit the number of packets sent to the route processor CPU for bridged ACEs, use the set acllog
ratelimit command.
set acllog ratelimit rate
Syntax Description
Defaults ACL log rate limiting is disabled.
Command Types Switch command.
Command Modes Privileged.
Usage Guidelines Af ter ente ring the set acllog ra telimit command or the clear acll og command, you must either reset the
route processor or perform a shut/not shut on the route processor interfaces that have ACEs with the log
keyword applied.
After entering the set acllog ratelimit command, the reset or shut/no shut action causes the bridged
ACEs to be redirected to the route processor with rate lim itin g.
To disable ACL log rate limiting, enter the clear acllog command. After entering the clear acllog
command, the reset or shut/no shut action causes the system t o return to its previous behavior. The bridge
action remains unchanged.
If the number of packets per second is greater than the rate that you specify, the packets that exceed the
specified rate are dropped.
A rate value of 500 is recommended.
Examples This example shows how to enable ACL logging and to specify a rate of 500 for rate limiting:
Console> (enable) set acllog ratelimit 500
If the ACLs-LOG were already applied, the rate limit mechanism will be effective on system
restart, or after shut/no shut the interface.
Console> (enable)
Related Commands clear acllog
show acllog
rate Number of packets per second; valid values are 1 to 1000. See the “Usage Guidelines”
section for more information.