NAM not seing traffic in one direction

Question

Hi, I got a 6500 VSS with a NAM plugged directly. We are not allowed to manage the SPAM sessions from the NAM appliance 2204 Version 5  , so we configured directly in the 65K CLI. We are trying to do captures but we get traffic only in one direction (ingress).
SWTRMCORE#sh ver
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(33)SXH6, RELEASE SOFTWARE (fc1)
The NAM is plugged into port:
interface GigabitEthernet2/1/3
description Conexion Monitoreo NAM2204 Port1
switchport
logging event link-status
Span session is set as follows:
monitor session 1 source interface Po10 , Po11 , Po21 , Po31 , Po32 , Po39 , Po42 , Po43 , Po44 , Po45
monitor session 1 destination interface Gi2/1/3
When we did some testings, we made sure that traffic was in deed through the portchannels in the span session by doing tracerts and generating icmp traffic. Still unable to see traffic in one direction.

Answer 1

Hi,
You should have the L2L VPN ACLs as mirror images of eachtother always. In your above configuration they werent. I am not sure if this is something that should break the L2L VPN connection in the way you mention but certainly configuring the connection like this is not recomended.
Also notice that the "permit ip" statement already includes "icmp" so there is really no need to add an additional line to the ACL.
I would recomend defining the needed networks to the L2L VPN ACL with the "permit ip" statements and using other methods to control the traffic through those L2L VPN connections IF needed.
- Jouni