topic FWSM ACL not working in Network Security

FWSM ACL not working

craig bache — Tue, 12 Mar 2019 01:07:09 GMT

Hi All

I was woundering if you could help on a issue I am seeing on a FWSM running 3.1.16. A new ACL has been entered:

1) ACL RULE is :

access-list access_in line 1 extended permit tcp any host x.x.x.x eq 6801 (hitcnt=0)

2) I do a capture to prove the packet is hitting the firewall and the correct interface :

FWSM/VFW(config)# show capture

capture cap type raw-data access-list 169 interface VRF [Capturing - 0 bytes]

FWSM/VFW(config)# show cap cap

1 packet seen, 1 packet captured

1: 17:31:36.1262257688 802.1Q vlan#3098 P0 y.y.y.y.3256 > x.x.x.x.6801: S 3510385702:3510385702(0) win 65535 <mss 1380,nop,nop,sackOK>

1 packet shown

3) However, the packet gets blocked in the firewall. I see no Hits and ASDM log displays (DENY)

Regards Craig

Jouni Forss — Wed, 27 Feb 2013 20:38:44 GMT

Hi,

Is the ACL actually attached to the interface?

access-group access_in in interface VRF

- Jouni

craig bache — Wed, 27 Feb 2013 20:41:34 GMT

Thanks for the response.

Yes I have the access-list on the correct interface,

access-group access_in in interface VRF

Regards Craig

Jouni Forss — Wed, 27 Feb 2013 20:51:53 GMT

Hi,

Could you share the configuration of the source and destination interface

- Jouni