cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
331
Views
0
Helpful
0
Replies
Highlighted
Beginner

Intra VLAN traffic blocked by SVI ACL

Hi,

I have a IP ACL applied to a SVI on a Nexus 7K, I understand that this is referred to as a 'router-acl'. My understanding is that this ACL should only apply to traffic going to/from a different subnet.

See Figure 11-2

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/guide/sec_nx-os-cfg/sec_ipacls.pdf

Why then do I see blocked 'intra' VLAN traffic?

N7K# sh logging ip access-list cache

Src IP        Dst IP     S-Port    D-Port    Src Intf         Protocol           Hits

------------------------------------------------------------------------------------------------

10.10.35.26     10.10.35.102      0       0         Ethernet4/30 (1)ICMP               3

10.10.35.26     10.10.35.1        0       0         Ethernet4/30 (1)ICMP               2

10.10.35.26     10.10.35.27       0       0         Ethernet4/30 (1)ICMP               4

10.10.35.26     10.10.190.1       0       0         Ethernet4/30 (1)ICMP               1

10.10.35.26     10.10.35.100      0       0         Ethernet4/30 (1)ICMP               4

Please can someone explain why 'intra' VLAN traffic is being blocked by a router-acl?

Many thanks!

0 REPLIES 0
Content for Community-Ad