> So that would be > > ip access-list extended DefaultrouteWithoutListedNetsTunnel > deny ip 192.168.8.0 0.0.0.255 10.2.60.0 0.0.0.255 > permit ip any 10.2.60.0 0.0.0.255 > > But packets to 192.168.8.1 still go out through the tunnel.
Well, yeah. Because it matches the access list. From the sounds of it, you need to list each local network specifically in the access list so it won't match. <obvious>That will be tricky.</obvious> B. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
