> packet-tracer input vlan90 ICMP 172.30.90.1 8 0 10.1.10.1 detailed Phase: 1 Type: INPUT-ROUTE-LOOKUP Subtype: Resolve Egress Interface Result: ALLOW Config: Additional Information: Found next-hop 172.30.20.2 using egress ifc 20(vrfid:0) Phase: 2 Type: ACCESS-LIST Subtype: Result: DROP Config: Implicit Rule Additional Information: Forward Flow based lookup yields rule: in id=0x14ca250963c0, priority=501, domain=permit, deny=true hits=0, user_data=0x7, cs_id=0x0, reverse, flags=0x0, protocol=0 src ip/id=172.30.90.1, mask=255.255.255.255, port=0, tag=any dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=any, dscp=0x0 input_ifc=vlan90(vrfid:0), output_ifc=any Result: input-interface: vlan90(vrfid:0) input-status: up input-line-status: up output-interface: 20(vrfid:0) output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule, Drop-location: frame 0x000055c60d7c25cd flow (NA)/NA