What switch configurations are needed to forward traffic?

[bobbyBrown1995]

Topology:
PC -> Switch -> Network Encryptor (Layer 3 device)

Switch:

• SVI for PC

• Default-gateway

  is Network Encryptor

• Static route 0.0.0.0/0 [1/0] via [Network Encryptor's IP]

• IP routing is enabled
• Routed port that connects to Network Encryptor

The switch can ping everything. 
The PC can ping its

default-gateway

which is the SVI, and the routed port.
The PC CANNOT ping the Network Encryptor (which is basically a routed port)


There are no ACLs

[MHM Cisco World · Accepted solution]

in network encryptor you must config route toward L3SW for PC subnet. 
that it I think no need more config.