Hi Try tro remove the *"host"* keyword from the local AAA database configuration this should create a dynamic ACL with permit ip any any.
R7(config-subif)#do sh run | i user username unlock password 0 ccie username unlock autocommand access-enable* host* timeout 2* ------> remove this* username ccie password 0 ccie BR _______________________________________________ Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: iPexpert on YouTube: www.youtube.com/ipexpertinc
