Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been unable to get SNTP and access to the web interface working properly on a Dell PowerConnect 3548p.

In the logs, this message appears over and over again:

04-Jan-2000 20:19:29 :%MNGINF-W-ACL: Management ACL drop packet received on interface Vlan 172 from to protocol 17 service Snmp

172 is the management vlan. is the DNS server is the switch's IP address.

The DNS server and the switch are located on different subnets and separated by routers.

I am unable to access the web interface of the switch from the 172.17.x.x subnet.

I can only access the web interface of the switch if I am accessing it from the 172.18.x.x subnet.

There is also a managed linksys switch on the 172.18.x.x subnet on the 172 vlan, which has no problem with SNTP. I can also access it from the 172.17.x.x network. So, it stands to reason that this is not a firewall or routing issue, but with the 3548p switch.

I suspect the issue is with management permissions/ACLs on the 3548p switch, but that's about as much as I've been able to determine so far.

Any ideas?

share|improve this question
Does the switch have a Default Gateway configured? If not, it needs to in order to communicate across subnets. – joeqwerty Nov 30 '12 at 15:53
It looks like that might be it...can't believe I missed that. – Force Flow Nov 30 '12 at 16:00
Let us know and if that's it I'll post my comment as an answer. – joeqwerty Nov 30 '12 at 16:01
ok, the clock on the switch just updated. Yep, that was it. Thanks! :) – Force Flow Nov 30 '12 at 16:02
Glad to help... – joeqwerty Nov 30 '12 at 16:09
up vote 1 down vote accepted

The switch needs to have a Default Gateway configured in order to communicate across subnets.

share|improve this answer

I've had the same problem, I had to add SNTP to my management access profile which now is:

management access-list "secure access"
permit service ssh priority 1
permit service https priority 2
permit service sntp priority 3

The default is deny so an explicit deny at the end of the acl is not required.

Furthermore did not work, I ended up adding the ip addresses manually.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.