Configure Ingress and Egress ACL Capture

Before you begin

Use the onboard PCAP configuration and ACL log option only while debugging.
All onboard PCAP configurations and ACL logging configuration must be unconfigured after completing debugging.

About this task

You can use the log option to the Access Control Entry (ACE) to capture packet through ACL for IPv4, IPv6, and MAC. All packets forwarded by ACE are captured by onboard packet capture.

Procedure

Configure packet capture through ACL.

ip access-list route-map-acl
	seq 10 permit ip any 2.2.2.2 255.255.255.255 log
ip access-list listener-policy-acl 
	seq 10 permit ip 1.1.1.1 255.255.255.255 any log

Attach the ACL to a route-map to make it an ingress ACL.

route-map route_map_1 1
	forward-action permit
	match ip access-list route-map-acl

Attach the ACL to a listener policy to make it an egress ACL.

listener-policy listener_policy_1 1
	forward-action permit
	match ip access-list listener-policy-acl