strange behaviour when applying ACL on 5500G LAG

[rbaffert]

This is what I have :



acl number 3005

description "ACL TO FILTER TRAFIC FROM CISCO 4400(G1/0/1 G2/0/1)"

rule 0 permit IP

rule 1 deny IP source 1.2.3.0 0.0.0.255

rule 2 permit IP source 1.2.3.0 0.0.0.255 destination 2.3.4.0 0.0.1.255

rule 3 permit IP source 1.2.3.0 0.0.0.255 destination 2.3.4.5 0

rule 4 permit IP source 1.2.3.0 0.0.0.255 destination 2.3.4.6 0

rule 5 permit TCP source 1.2.3.0 0.0.0.255 source-port eq 5900





We activate the ACL on the port :



packet-filter inbound ip-group 3005



AFTER A FEW SECONDS WE LOOSE LINK TO CISCO 4400 WIRELESS CONTROLLER



#Jul 9 14:39:03:848 2009 SWITCH LAGG/2/AggPortInactive:- 1 -Trap 1.3.6.1.4.1.43.45.1.5.25.25.2.2(hwAggPortInactiveNotification): TrapIndex 5 Aggregation Group 5: port member GigabitEthernet2/0/1 is INACTIVE!

Romain BAFFERT

Cabling Partners