I experimented and the following allowed me to see both sides of the
traffic:
(config-if)#switchport capture allowed vlan all
!works in both directions
VS
(config-if)#switchport capture allowed vlan <target vlan>
!works for inbound (WAN->VLAN) only
I have not applied the VACL to any VLAN other than <target vlan>, and
the ingress/egress points for the traffic are L3 physical interfaces,
not other VLANs.
Could someone can hit me with a clue-bat?
Thanks all,
~Randy
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/