ACL C2911 problem

[stancu8]

Hi,

I faced strange problem on my router 2911/K9. 

ACL deny ssh traffic with correct IP address.

When I look into my syslog I can see that ACL denied traffic form correct IP to various addresses which begin with 32.x.x.x, 31.x.x.x, 61.x.x.x etc.

Those addresses were not confiured anywhere. All my adresses start with 10.x.x.x.

In show access-list I can see that 1 packet is matching correct entry, but second is denied with this strange IP, which is different every single time.

IOS - 15.7(3)M6. 

Anyone faced same behaviour?

[julian.bendix]

Hi!

Not sure if I understand you properly.

So you see in your Router's Logs that IP addresses from your internal network try to SSH to various public IPs and that seems to be denied by your router?

Best regards
Juls