the following access-list works on the 1841 and on the 1921 but not on the 4221 router IOS is
isr4200-universalk9_ias.16.09.03.SPA.bin
access-list 110 permit eigrp 172.16.16.0 0.0.15.255 host 224.0.0.10
access-list 110 permit eigrp 172.16.16.0 0.0.15.255 172.16.16.0 0.0.15.255
access-list 110 permit icmp 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 echo
access-list 110 permit icmp 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 echo-reply
access-list 110 permit tcp 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 eq 1521
access-list 110 permit tcp 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 eq 4300
access-list 110 permit tcp 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 eq 4301
access-list 110 permit tcp 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 eq 4350
access-list 110 permit tcp 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 eq 4351
access-list 110 permit tcp 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 eq 5001
access-list 110 deny ip any any log
the icmp and the eigrp part works but the rest does not, when i remove the access-list from the interface all works.
if i add permit ip 172.20.0.0 0.0.255.255 172.20.0.0 0.0.255.255 it works.
the access-list is applied on a tunnel interface for a dmvpn.
the whole configuration works on other cisco router models from the 1841 to the 1921 but not on the 4221.