> A couple of things come to mind in your config. > > 1) Why have an IP Access Group on a Switchport? Even though your device > may be routing, I'm fairly certain Layer 3 ACL's won't be processed by a > Layer 2 port. For the 3550 you would be wrong. Steinar Haug, Nethelp consulting, sthaug at nethelp.no