This is what I have :
acl number 3005
description "ACL TO FILTER TRAFIC FROM CISCO 4400(G1/0/1 G2/0/1)"
rule 0 permit IP
rule 1 deny IP source 1.2.3.0 0.0.0.255
rule 2 permit IP source 1.2.3.0 0.0.0.255 destination 2.3.4.0 0.0.1.255
rule 3 permit IP source 1.2.3.0 0.0.0.255 destination 2.3.4.5 0
rule 4 permit IP source 1.2.3.0 0.0.0.255 destination 2.3.4.6 0
rule 5 permit TCP source 1.2.3.0 0.0.0.255 source-port eq 5900
We activate the ACL on the port :
packet-filter inbound ip-group 3005
AFTER A FEW SECONDS WE LOOSE LINK TO CISCO 4400 WIRELESS CONTROLLER
#Jul 9 14:39:03:848 2009 SWITCH LAGG/2/AggPortInactive:- 1 -Trap 1.3.6.1.4.1.43.45.1.5.25.25.2.2(hwAggPortInactiveNotification): TrapIndex 5 Aggregation Group 5: port member GigabitEthernet2/0/1 is INACTIVE!
Romain BAFFERT
Cabling Partners