Hello Jerome, I was just wondering if this is why it's happening.
During our telnet session, suppose we type in a character AFTER logging into the router, that character is first sent from the client to the server and then reflected back from the server to the client. These reflecting packets have a source port of 23 and a random destination port. It looks like ONLY these packets are going to the IPS, whereas the original packets going from the client to the server are not. To check, are you getting hits on the ICMP echo-request signature (2004) when you ping from R1 to R2? Cheers, TacACK
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
