Problem description
Please help to check since we can’t ping the same subnet between VXLAN after applying traffic-policy, but another different subnet is fine.
Below a sample of config:
[~switch-COR01-acl4-advance-3024]dis this
#
aclnumber 3024
rule 5 permit ip vpn-instance vrf_global destination 10.2.30.0 0.0.0.15
rule 6 permit icmp vpn-instance vrf_global
rule 9
bridge-domain 24
traffic-policy P3024 inbound “we apply this one”
Problem Analysis
Ask the customer to explain the issue in details and feedback network topo diagnose information. Customer request for remote troubleshooting and help.
Root Cause
It is a configuration issue and ACL deny the XVLAN underlay traffic.
SolutionDescription
It is a configuration issue and ACL deny the XVLAN underlay traffic.
acl number 3024
rule 9 deny ip vpn-instance vrf_global destination 172.16.0.0 0.15.255.255
acl 3024
undo rule 9