Hi, > access-list 110 remark ***** ACL route-map RerouteWebTraffic ***** > access-list 110 permit tcp any any eq www > access-list 110 permit tcp any any eq 443 > > route-map sdsl permit 10 > match ip address NAT_Exempt > > ip access-list extended NAT_Exempt > deny ip 192.168.8.0 0.0.0.255 192.168.6.0 0.0.0.255 > deny ip 192.168.8.0 0.0.0.255 192.168.7.0 0.0.0.255 > permit ip 192.168.8.0 0.0.0.255 any
I guess this is the problem. Try denying things allowed in acl 110 away from acl NAT_Exempt and see if that helps (be sure that these new denies are before permit in that acl). Best regards, Jan
signature.asc
Description: OpenPGP digital signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
