[f-nsp] ACL matching on multicast sources

Niels Bakker niels=foundry-nsp at bakker.net
Wed Sep 18 20:29:38 EDT 2013


* bdflemin at gmail.com (Brad Fleming) [Thu 19 Sep 2013, 02:03 CEST]:
>I'm having an issue trying to match traffic based on IP source of 
>a multicast group. Traffic is flowing through a VE interface if that 
>makes any difference. I know the traffic is actually moving because 
>I'm watching the video broadcast on my laptop right now via VLC. I'm 
>also seeing traffic that should match coming through the port in our 
>sFlow monitoring system. Any suggestions would be appreciated.

Do you have enable-acl-accounting configured?  Have you rebound the 
ACL to the interface after modifying it (assuming you're on an MLX/XMR 
before 5.4) using "ip rebind-acl internet2_in" in config mode?


	-- Niels.

-- 



More information about the foundry-nsp mailing list