[c-nsp] IP Options Drop

[Dobbins, Roland]

On Apr 18, 2014, at 11:40 PM, Robert Williams <Robert at CustodianDC.com> wrote:

> The lab kit is running 15.1(2)SY1 in the tests shown above.

What Sup/linecards?

Are you sure your Sup/linecards support evaluating options as a classifier?  If they don't, then even though the options keyword shows up in the ACL, it's just textual, and you're actually doing a deny ip any any.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton