I experimented and the following allowed me to see both sides of the traffic:

(config-if)#switchport capture allowed vlan all
!works in both directions

VS

(config-if)#switchport capture allowed vlan <target vlan>
!works for inbound (WAN->VLAN) only

I have not applied the VACL to any VLAN other than <target vlan>, and the ingress/egress points for the traffic are L3 physical interfaces, not other VLANs.

Could someone can hit me with a clue-bat?

Thanks all,

~Randy




_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to