Hello,
I've created a reflexive ACL to allow IP SLA flows between two routers. Looking at the ACL counters, none of the outbound or inbound IP SLA permit statements are incrementing. Looking at the logs, I can see that my IP SLA return traffic is being blocked by the inbound ACL (I created a "deny ip any any log" at the end of my inbound ACL). Since the outbound reflexive statements aren't handling the outbound traffic (the counters aren't incrementing), the inbound reflexive ACL statements aren't being built. When I remove the ACLs, the IP SLA traffic flows normally.
Do ACLs apply to network traffic originated from the router? If not, how could I build a reflexive ACL to support IP SLA traffic?
Thanks,
Rob
