<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic SLX 8720 - ACL for outbound not allowed in Data Center (SLX)</title>
    <link>https://community.extremenetworks.com/t5/data-center-slx/slx-8720-acl-for-outbound-not-allowed/m-p/121449#M804</link>
    <description>&lt;P&gt;&lt;SPAN&gt;Hello experts,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I just want to confirm if this is a hardware limitation (My device is a SLX 8720) or other problem I've not identified, I applied an IPv4 &amp;amp; IPv6 Inbound direction and these are working as expected but at the time I tried to apply in the outbound direction:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;IPv6 is showing the following error: %%Error: Applying IPv6 ACL in egress direction not supported.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;IPv4 is showing the following error: %%Error: Applying ACL over Port-Channel in egress direction is currently not supported.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Both were tried to be applied at Interface Port-channel and interface Ve with same result.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Besides of this, the command as per documentation to verify the ACL counts looks like is not working as expected, here the example, it does not like the acl name:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;SLX701xs1# show access-list ip ?&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Possible completions:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;IP_ACL&amp;gt; Access List Name (Max 63)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;| Output modifiers&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;cr&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;SLX701xs1# show access-list ip v6_gnbs_piz_inbound&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;---------------------------------^&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;syntax error: unknown argument&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks for your help.&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 09 Apr 2026 11:01:10 GMT</pubDate>
    <dc:creator>Alberto_Oter</dc:creator>
    <dc:date>2026-04-09T11:01:10Z</dc:date>
    <item>
      <title>SLX 8720 - ACL for outbound not allowed</title>
      <link>https://community.extremenetworks.com/t5/data-center-slx/slx-8720-acl-for-outbound-not-allowed/m-p/121449#M804</link>
      <description>&lt;P&gt;&lt;SPAN&gt;Hello experts,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I just want to confirm if this is a hardware limitation (My device is a SLX 8720) or other problem I've not identified, I applied an IPv4 &amp;amp; IPv6 Inbound direction and these are working as expected but at the time I tried to apply in the outbound direction:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;IPv6 is showing the following error: %%Error: Applying IPv6 ACL in egress direction not supported.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;IPv4 is showing the following error: %%Error: Applying ACL over Port-Channel in egress direction is currently not supported.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Both were tried to be applied at Interface Port-channel and interface Ve with same result.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Besides of this, the command as per documentation to verify the ACL counts looks like is not working as expected, here the example, it does not like the acl name:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;SLX701xs1# show access-list ip ?&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Possible completions:&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;IP_ACL&amp;gt; Access List Name (Max 63)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;| Output modifiers&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;lt;cr&amp;gt;&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;SLX701xs1# show access-list ip v6_gnbs_piz_inbound&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;---------------------------------^&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;syntax error: unknown argument&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thanks for your help.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 09 Apr 2026 11:01:10 GMT</pubDate>
      <guid>https://community.extremenetworks.com/t5/data-center-slx/slx-8720-acl-for-outbound-not-allowed/m-p/121449#M804</guid>
      <dc:creator>Alberto_Oter</dc:creator>
      <dc:date>2026-04-09T11:01:10Z</dc:date>
    </item>
    <item>
      <title>Re: SLX 8720 - ACL for outbound not allowed</title>
      <link>https://community.extremenetworks.com/t5/data-center-slx/slx-8720-acl-for-outbound-not-allowed/m-p/121455#M806</link>
      <description>&lt;P&gt;Alberto,&lt;/P&gt;&lt;P&gt;The messages you are seeing are expected.&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Per the SLX-OS Security Guide:&lt;/P&gt;&lt;P&gt;&lt;A href="https://documentation.extremenetworks.com/Extreme%20SLX-OS%2020.7.3%20Security%20Configuration%20Guide/downloads/slx-20.7.3-securityguide.pdf" target="_blank"&gt;https://documentation.extremenetworks.com/Extreme%20SLX-OS%2020.7.3%20Security%20Configuration%20Guide/downloads/slx-20.7.3-securityguide.pdf&lt;/A&gt;&amp;nbsp;(page 43)&lt;/P&gt;&lt;P&gt;IPv6 Egress is not supported:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Michael_Morey_0-1775740898193.png" style="width: 671px;"&gt;&lt;img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/9325i323078B67539C558/image-dimensions/671x173?v=v2" width="671" height="173" role="button" title="Michael_Morey_0-1775740898193.png" alt="Michael_Morey_0-1775740898193.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Regarding the IPv4 Egress being applied on a Port-Channel, this is in fact a hardware limitation of the 8720.&amp;nbsp; The limitation for the 9250 mentioned on page 38 of the same guide also apply to the 8720&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Michael_Morey_1-1775741012262.png" style="width: 674px;"&gt;&lt;img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/9326i0E5056396E51C502/image-dimensions/674x332?v=v2" width="674" height="332" role="button" title="Michael_Morey_1-1775741012262.png" alt="Michael_Morey_1-1775741012262.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Lastly, your command is not completing as you are not providing all the required arguments:&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;SLX# show access-list ip acl_Name ?&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;Possible completions:&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;in Ingress Direction&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;interface Show ACL for specific interface&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;out Egress Direction&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;SLX# show access-list ip acl_Name &lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;-------------------------^&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;syntax error: unknown argument&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;Please use "&lt;SPAN&gt;&lt;FONT face="courier new,courier"&gt;show access-list ip v6_gnbs_piz_inbound [in|out]&lt;/FONT&gt;" or specify the interface and direction you are wanting to look at.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 09 Apr 2026 13:27:54 GMT</pubDate>
      <guid>https://community.extremenetworks.com/t5/data-center-slx/slx-8720-acl-for-outbound-not-allowed/m-p/121455#M806</guid>
      <dc:creator>Michael_Morey</dc:creator>
      <dc:date>2026-04-09T13:27:54Z</dc:date>
    </item>
  </channel>
</rss>

