Reflexive ACL entry question

From: Schulz, Dave (DSchulz@dpsciences.com)
Date: Thu Jan 12 2006 - 12:42:07 GMT-3


I am working with some reflexive ACLs. Everything is working fine,
but.....doing a telnet from router through to another....I noticed that
the return path was going to port 11002, rather than the expected port
23. I could not find any documentation on this. Does anyone have any
information on this, or, at least point me to the information. Thanks
in advance!

R1#sh ip access
Extended IP access list TCPIN
    10 permit ospf any any (8 matches)
    20 permit icmp any any (20 matches)
    30 permit tcp any any eq telnet reflect TELNET (31 matches)
Extended IP access list TCPOUT
    10 permit ospf any any (1 match)
    20 evaluate TELNET
Reflexive IP access list TELNET
     permit tcp host 172.16.1.4 eq telnet host 192.168.1.3 eq 11002 (52
matches) (time left 293)

Dave

Dave Schulz,
Email: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com >



This archive was generated by hypermail 2.1.4 : Wed Feb 01 2006 - 07:45:48 GMT-3