Victor Sudakov wrote: > As soon as I enable CBAC on the outside interface: > > interface Serial0/0 > ip access-group DENY_ALL in > ip inspect FOO out > > those non-initial fragments stop arriving. I think CBAC does not > create dynamic ACL entries for the fragments for some reason.
This must be CSCdu30492 and CSCdx17419. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:[email protected] _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
