Reflexive access-list

From: premkumar somasundaram (premkumar.somasundaram@gmail.com)
Date: Sat Jun 02 2007 - 12:50:03 ART


Group.
I have a issue with the reflexive access-list. Here is the scenario.... I
need to configure reflexive access-list on R3 to allow ICMP, TCP, UDP and
OSPF traffic from inside to outside. The configuration is follows.

interface Serial2/3
 ip address 136.1.23.3 255.255.255.0
 ip access-group INBOUND in
 ip access-group OUTBOUND out
 encapsulation ppp
 clock rate 64000
 no dce-terminal-timing-enable

ip access-list extended INBOUND
 evaluate MIRROR
ip access-list extended OUTBOUND
 permit icmp any any reflect MIRROR
 permit tcp any any reflect MIRROR
 permit udp any any reflect MIRROR
 permit ospf any any reflect MIRROR
!

For testing, I used to ping for ICMP, Telnet for TCP , and Routing protocol
for OSPF.

But none of them worked...I am sure something is missing from the config
which i could nt find out..can any one help me on this...

Thanks
Prem



This archive was generated by hypermail 2.1.4 : Sun Jul 01 2007 - 17:24:46 ART