topic RE: Apply ACL to ISL port in Data Center (VDX)

Apply ACL to ISL port

kyungchan_tae — Thu, 30 Aug 2018 08:02:00 GMT

I want to apply ACL to VDX ISL port.
However, the following error message occurs when applying:

Bottom_SW1(conf-if-fo-1/0/49)# ip access-group Test_ACL out
%% Error: Edgeport configurations are not allowed on ISL ports.
Shutdown interface to apply such configurations.

The interface can be applied by shutdown. (and no shutdown)
Does access-group work in this case?

Thanks,
KYUNGCHAN.

RE: Apply ACL to ISL port

Jason_Howlett — Thu, 30 Aug 2018 17:57:00 GMT

ACL's should be applied on edge ports not on ISL ports

RE: Apply ACL to ISL port

Yulia_Abitbul — Thu, 30 Aug 2018 23:09:00 GMT

Hi KYUNGCHAN,

You can shutdown interface, disable ISL and apply ACL
ACLs are not allowed on ISL links,

Best Regards,
Yulia