https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51911#M14270 I found what i ask. I just need more RTFM, sorry.<BR /> <BR /> Thank You.<BR /> <BR /> Fri, 01 Jul 2016 09:40:00 GMT modris_bernands 2016-07-01T09:40:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51905#M14264 I want to collect "Rejected IP" + "Rejected Port" from problematic X350.<BR /> Is possible get this information with snmp or other method?<BR /> <BR /> Additional Q: if I create ACL to deny unwanted subnet on "Rejected port", Is this deny connection count only on 'show access-list counter' or included also in "Rejected IP" and "Rejected Port" (read: show iparp stats vlan all) ?<BR /> <BR /> I got many rejected counts and because I want start debug collect it to start debug my network incorrect design.<BR /> <BR /> excuse about my bad English and networking knowledge...<BR /> Wed, 29 Jun 2016 16:35:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51905#M14264 modris_bernands 2016-06-29T16:35:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51906#M14265 As far as I know, these values are not available in any SNMP MIB.<BR /> The ACL counters are only shown with 'show access-list counter' and will not show up in any other system counter.<BR /> <BR /> Thu, 30 Jun 2016 13:17:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51906#M14265 Ron_Huygens 2016-06-30T13:17:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51907#M14266 You can allow ARP packets having a sender address within a network subnet configured and deny everything else. You would see ACL deny counter increasing but not see the rejected counter increasing in the show iparp output.<BR /> <BR /> entry 1 { if { arp-sender-address 10.0.0.0/24; } then { permit; } }<BR /> entry 2 { if { arp-sender-address 0.0.0.0/0; } then { deny; count denyarp; } } <BR /> Fri, 01 Jul 2016 09:40:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51907#M14266 Kevin_Kim 2016-07-01T09:40:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51908#M14267 Thats is what I need, work greate and block all unvanted ARP. Fri, 01 Jul 2016 09:40:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51908#M14267 modris_bernands 2016-07-01T09:40:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51909#M14268 What ir Yours documental library for <MATCH-CONDITIONS> in ACL? Is there place where it all together, for example, rfc? <BR /> <BR /> I try find some similaries with wireshark filters, but not sure. Or is this only defined and implemented by extreme designers?<BR /> <BR /></MATCH-CONDITIONS> Fri, 01 Jul 2016 09:40:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51909#M14268 modris_bernands 2016-07-01T09:40:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51910#M14269 Please check 'Chapter 20 ACLs' in the EXOS 15.3 Concepts Guide. <BR /> <BR /> <A href="http://extremenetworks.com/wp-content/uploads/2014/03/EXOS_Concepts_Guide_15_3_2.pdf" target="_blank" rel="nofollow noreferrer noopener">http://extremenetworks.com/wp-content/uploads/2014/03/EXOS_Concepts_Guide_15_3_2.pdf</A><BR /> Fri, 01 Jul 2016 09:40:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51910#M14269 Kevin_Kim 2016-07-01T09:40:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51911#M14270 I found what i ask. I just need more RTFM, sorry.<BR /> <BR /> Thank You.<BR /> <BR /> Fri, 01 Jul 2016 09:40:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/is-possible-to-collect-rejected-ip-and-ports-with-snmp/m-p/51911#M14270 modris_bernands 2016-07-01T09:40:00Z