How to tell if interesting traffic is being blocked or allowed by an ACL

[NetNut]

Is there a way to know if traffic is being blocked by an ACL, perhaps in an event log or something?  I have a customer who could not get to a site and turns out there was an ACL on the switch that I did not know about.  I would have hoped there were some type of monitor tool or something that I could have referred to reporting 'traffic dropped' based on the supposed visibility that is supposed to exist, but I could not find anything.

[DarrenOC]

Hi @NetNut , it would be worth exporting your logs to a syslog server. This would capture all data and give you something to refer to when troubleshooting 

[GIdenJoe · Accepted solution]

Meraki does have great visibility in your network but a switch ACL remains a switch ACL which is stateless.  If your switch would have to bother to log every packet you might as well use a stateful firewall to route your intervlan traffic.  But then you would have to scale that firewall according to all traffic passing it.

The only drawback is that you don't have packet counters like you can have on more powerful switches.

[NetNut]

Uccert, GldnJoe,,,

Got it, both makes sense. -thanks.