Traffic matching the internal control network is dropped by NPM.Traffic is dropped by an NPM and the Drop reason is "L3 drop policy", e.g:
CBS# show flow active proto 1
This command may take a few minutes. Do you want to continue? <Y or N> [Y]:
Module Source Destination Prot Dom TTI/MAX
np1 22.214.171.124:0 126.96.36.199:0 1
Drop(L3 drop policy)
rx circuit 1026 Master np1 Fast Path Y rx packets 0
An NPM drops traffic with the reason "L3 drop policy" if the inbound packets match a flow rule defined with the action Drop.