I've got a Cisco 877 router. I've got an IPv4 access list and an IPv6 access list set up and configured similar to this:
interface Dialer1 ... ip access-group INTERET-IN ipv6 traffic-filter IPV6-IN
The Access lists are similar to this:
ip access-list extended INTERNET-IN remark establishd connections permit tcp any any established ... deny ip any any log
ipv6 access-list IPV6-IN permit esp any any sequence 30 permit tcp any any established sequence 50 remark NTP ... sequence 240 deny ipv6 any any log-input
Each of these access lists has a final rule of
deny ip/ipv6 any any log. However, in my syslog I notice that there's a difference in formatting between the two types of entries. IPv4 will say:
%SEC-6-IPACCESSLOGP: list INTERNET-IN denied udp 22.214.171.124(137) -> 126.96.36.199(137), 1 packet
Whereas the IPv6 list will say
%IPV6_ACL-6-ACCESSLOGNP: list IPV6-IN/240 denied 59 2001:0:5EF5:79FD:14F9:B773:3EBA:3EE3 (Dialer1) -> 2001:800:1000:0::1, 8 packets
Both have broadly the same information, but the IPv6 log entry is missing the protocol type and port, both of which are very useful if I'm trying to troubleshoot connectivity.
Why is this? How do I get IPv6 deny logs to display the protocol and port used, if any?