I have two interfaces, vlan 45 and vlan 46.
vlan 45 have a security level of 30 and vlan 46 have 25.
I have a server running on vlan 46, I can ping from the server connected in vlan 45.
I have applied "permit ip any any" in both the interfaces in "IN" direction. but when I could not telnet from the server in vlan 45 to vlan 46.
I put a capture in the interface vlan 45, when I ping I can see packets, I cant see any packets when I telnet (or any other TCP).
ultimately I can get any TCP session to vlan 46 from 45.
Any inputs are appreciated.