Couple questions
1. The SG show to change the "logging buffered and logging console" to informational. Would it not also be correct to leave the default which is debugging?
2. Also isnt the logging on and no logging monitor a bit of overkill?
3. I was unable to generate the denial logs according to the SG, see my results below:
Rack26R6#traceroute 150.26.1.1 ttl 1 10
Type escape sequence to abort.
Tracing the route to 150.26.1.1
1 183.26.46.4 [MPLS: Label 20 Exp 0] 92 msec 92 msec 96 msec
2 183.26.0.5 [MPLS: Label 20 Exp 0] 84 msec 64 msec 60 msec
3 183.26.105.10 36 msec 32 msec 36 msec
4 183.26.107.7 36 msec 36 msec 32 msec
5 183.26.17.1 40 msec * 32 msec