Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ICMP pings from the inside, from an outside subnet!

Hi!

Lost on this one.

SVI L3 interface configured with inbound and outbound ACLs.

On inbound ICMP ACL, ICMP packets are logged from a source that doesn't belong to the subnet that is being controlled! Anyone know what's happening? Thanks in advance!

Feb 13 01:12:17 aswitch 1318027 Feb 13 01:12:16.515 UTC: %SEC-6-IPACCESSLOGDP: list ACL-control-in permitted icmp 172.28.202.78 -> 172.30.253.97 (8/0), 1 packet

2 REPLIES
Hall of Fame Super Blue

ICMP pings from the inside, from an outside subnet!

Might help if you posted config ie. the acls and the SVI config ?

Then again might not but it's a bit difficult to tell with what we have at the moment

Jon

ICMP pings from the inside, from an outside subnet!

Are you saying that you're supposed to be blocking the subnet 172.28.202.x from being able to ping, but the acl is allowing it? Can you post your acl and the interface config that the acl is tied to?

HTH,
John

*** Please rate all useful posts ***

HTH, John *** Please rate all useful posts ***
57
Views
0
Helpful
2
Replies
CreatePlease login to create content