Please put a "deny ip any any log" as last statement in the acl and try it again. Then check the logger.
What version of IOS do you use, because in version 12.3.8T they changed the acl handling.
It should be working with 12.3.8T or later otherwise you have to additional define the lan traffic.
You don't need a tunnel interface for this.
Please delete the tunnel interface and try it again.
The ipsec tunnel has nothing to do yith a tunnelinterface on the router.
further you need a static route entry that the pool addresses are reachable via your e1
ip route 172.25.25.0 255.255.255.0...
Hi,
You don't need Queuing on an ethernet, because it is fast enough to handle the T1 traffic.
You need WFQ on the T1 side to give each flow the same amount of bandwidth. With FIFO the flows with the biggest packets are the winners.
Hi,
Try to use a police-map inbound on the ethernet.
conf t
access-list 199 permit ip any any
route-map clear-df-bit permit 10
match ip address 199
set ip df 0
ethernet 0
ip policy route-map clear df-bit
end
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.