CISCO Route-MAP / ACL object group query.

[AIT]

Hi All,

 

ODD one.

 

We use a 'route-map' to determine what to forward to our smooth wall cluster for filtering (or really the loadblancer). and this route-map refers to an ACL which defines if its a network we want to forward on or circumvent the smoothwalls. Up to date this has worked perfectly.

 

However: as of a few days ago. Our ACL which contains an object-group (with a load of Microsoft Ip's in). Seems to only process down to the object group part of the ACL. Everything after that seems to be ignored. (or thats what the hit counters when viewing the ACL would appear to indicate along with Ip ranges suddenly not receiving transparent filtering)

 

My question anyone has seen this before/know a fix?

 

Thanks

[Aprice]

Does a debug ip policy detail give anything away?

 

Hopefully should indicate where the traffic is being matched / not matched.

[AIT]

Debug Ip Policy (route map name) is not an option.

Only has an option to debug ACL list. (and not extended ones)