Problem with reflexive ACLs

Rob — Tue, 12 Mar 2019 03:32:02 GMT

Hello,

I've created a reflexive ACL to allow IP SLA flows between two routers. Looking at the ACL counters, none of the outbound or inbound IP SLA permit statements are incrementing. Looking at the logs, I can see that my IP SLA return traffic is being blocked by the inbound ACL (I created a "deny ip any any log" at the end of my inbound ACL). Since the outbound reflexive statements aren't handling the outbound traffic (the counters aren't incrementing), the inbound reflexive ACL statements aren't being built. When I remove the ACLs, the IP SLA traffic flows normally.

Do ACLs apply to network traffic originated from the router? If not, how could I build a reflexive ACL to support IP SLA traffic?

Thanks,

Rob

Problem with reflexive ACLs

Julio Carvajal — Sat, 18 Jan 2014 06:11:05 GMT

Hello Robert,

Traffic generated from the routed itself is not taken into consideration for Reflexive ACLs sessions

Looking for some Networking Assistance?
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

topic Problem with reflexive ACLs in Network Security

Problem with reflexive ACLs

Problem with reflexive ACLs