10-17-2024 04:51 PM
Hi Experts,
I am configuring an ISA 3000 in transparent mode using subinterfaces.
I created a BVI1 and assign the bridge-group 1 into the subinterfaces using separated vlans.
But I am not able to send traffic into the same BVI, firewall shows the following message in capture:
802.3 encap packet Drop-reason: (dst-l2_lookup-fail) Dst MAC L2 Lookup Failed, Drop-location: frame snp_fp_process_l2_packet:2122 flow
Any suggestion will be very appreciated.
10-17-2024 05:43 PM
The description matches with the Bug CSCva56343
https://bst.cisco.com/bugsearch/bug/CSCva56343?rfs=qvlogin
10-31-2024 12:57 AM
this issue solved ?
MHM
11-01-2024 07:11 AM
Hi,
It was an issue on the layer 2 switch behind the firewall.
I assigned the mode access ports but I did not create the vlan xx so the interfaces did not know how to tag it.
I noticed it when I checked the show vlan
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide