TCP intercept
Experts,
I am working with TCP intercept and noticed I can only get my router to see watched traffic and get any debug output unless I disable cef switching. My config looks like this…
=================================== no ip cef
access-list 199 permit tcp any 150.1.4.0 0.0.0.255 eq www
ip tcp intercept list 199 ip tcp intercept connection-timeout 3600 ip tcp intercept max-incomplete low 1200 ip tcp intercept max-incomplete high 1500 ip tcp intercept drop-mode random ===================================
Is this normal behavior? And if I am in the lab and I am only able to get any tcp intercept debug output to work is to disable cef should I do it?
Thanks Chris
Blogs and organic groups at http://www.ccie.net
























