RE: Cisco acls

["Luke Butcher" <Luke.Butcher () alphawest com au>]

Not sure about a lint checker and router ACLs unfortunately don't show a
hit count like PIX ones. So the only option is probably to add a log
keyword to your permit statements and then watch the logs to see if the
statements are being hit.

As for older ones it maybe a bit late for existing ones, but there is a
remark keyword in modern IOS(s?) which makes it very handy for
remembering why a certain line was there.

Regards,
Luke Butcher
Network/Security Consultant


-----Original Message-----
From: Mark Teicher [mailto:mht3 () earthlink net] 
Sent: Tuesday, 8 March 2005 11:06 PM
To: Bruce Smith
Cc: 'Eric Appelboom'; firewall-wizards () honor icsalabs com
Subject: RE: [fw-wiz] Cisco acls

Has anyone seen or heard of a Cisco ACL lint checker to validate whether
a certain acl is being utilized or at all.  What about old acls that
have been around for a while, and no one understands why they were
inserted in the first place.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards