Catalyst 4006 ACLs on sub interfaces

[david.porter]

Hello,

I am configuring a Catalyst 4006 Layer 3 Services Engine. Routing between the VLANs is working fine.

I am able to apply ACLs to the internal gigabit sub-interfaces however they are not matching traffic as I would expect.

For example;

access-list 101 permit tcp any any eq 23

int gigabiteth 4.6

ip access-group 101 in

This (above) does not allow telnet trafic and does not indicate any matches. However it does appear to block all traffic eg ICMP.

I use ACLs on pure routers but this is my first go on this platform. Am I missing something fundamental?

[millerv]

ACLS should work fine. Remember, the deny any at the end. What specifically are you trying to permit/deny ?