Tracing packets on cisco - interface access-group

• cisco access list

  • permit everything, but log packets from 10.2.3.4 to 195.176.0.0/16
    • access-list 199 permit ip 10.2.3.4 0.0.0.0 195.176.0.0 0.0.255.255 log-input
    • access-list 199 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255

• apply access-list to interface

  • interface serial3
  • ip access-group 199 out