Have created a Policy file that has a explicit deny at the end. When I apply it traffic is being blocked that I don't wont.
In order to workout whats wrong I have changed the deny to permit, and added a log, mirror-cpu and count.
The count is increasing at a good rate but nothing is logging, but I can't see anything wrong with my configuration - The Vlan 'Accounts' uses subnet 10.10.10.0/24. I believe I could write the deny differently but omitting the source-address field or changing it to 0.0.0.0/0, but it makes no odds as the count is going up so something should be logging?
entry deny {
if {
source-address 10.10.10.0/24;
} then {
permit;
mirror-cpu;
log;
count dey;
}
}
configure log filter DefaultFilter add event kern.infoconfigure access-list Policy_Filename port 1:8 ingress
or
configure access-list Policy_Filename vlan Accounts ingressI have checked logging is on and working and set from the lowest level of 'warning'.
EXOS version 15.3.1.4 patch 1-3.
Switch: X460-48t
Any idea's what I might be doing wrong?
Thanks in advance
