Cisco IOS in a Nutshell, 2nd Edition

Name

ip accounting — interface

Synopsis

ip accounting [access-violations]
no ip accounting [access-violations]

Configures

IP accounting for an interface

Default

Disabled

Description

This command enables IP accounting based on the source and destination IP addresses that are passing through this router. Traffic that terminates at the router is not logged. The access-violations option enables logging based on access lists. For an access list to log information, the log keyword must be specified at the end of the access-list command.

Example

The following interface has IP accounting enabled and logs access-list violations:

interface serial 1
  ip address 10.10.2.3 255.255.255.0
  ip access-group 110 in
  ip accounting access-violations
! Deny telnet to the outside and log it when someone tries
access-list 110 deny tcp 10.10.2.0 0.0.0.255 any eq 23 log
access-list 110 permit ip any any