Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

WAAS IP ACL not matching traffic

Hi,

i'm trying to configure some ip access-lists on a WAAS but it seems that it's not matching the traffic.

interface InlineGroup 1/0

inline vlan all

ip access-group test in

exit

ip access-list extended test

deny icmp any any

exit


Im still able to ping wherever i want.

Any ideas? Or is it not possible to handle traffic with ACLs like that on WAAS?

Thanks,

Markus

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

WAAS IP ACL not matching traffic

Hi Markus,

Interface ACL—Applied on the built-in, port channel, standby, and inline group interfaces. This type of ACL is intended to control management traffic (Telnet, SSH, and Central Manager GUI). The ACL rules apply only to traffic that is destined for the WAE or originates from the WAE, not WCCP transit traffic. Use the

ip access-group interface configuration command to apply an interface ACL.

As explained above the ACL rule apply only to traffic destined to the WAE or originated from the WAE and not for transit traffic. Hope this helps.

Thanks,

Rajesh

2 REPLIES
Cisco Employee

WAAS IP ACL not matching traffic

Hi Markus,

Interface ACL—Applied on the built-in, port channel, standby, and inline group interfaces. This type of ACL is intended to control management traffic (Telnet, SSH, and Central Manager GUI). The ACL rules apply only to traffic that is destined for the WAE or originates from the WAE, not WCCP transit traffic. Use the

ip access-group interface configuration command to apply an interface ACL.

As explained above the ACL rule apply only to traffic destined to the WAE or originated from the WAE and not for transit traffic. Hope this helps.

Thanks,

Rajesh

Community Member

WAAS IP ACL not matching traffic

Thanks Rajesh,

thanks for the explanation. Thats the info i was searching for.

Best,

Markus

430
Views
0
Helpful
2
Replies
CreatePlease to create content