topic Creating VLAN ACL on BD8806 in ExtremeSwitching (EXOS/Switch Engine)

Creating VLAN ACL on BD8806

Alaa_Naifa — Tue, 19 Jul 2016 12:14:00 GMT

trying to create VLAN acl on BD8806 and getting the below error;

SKB-BD8806.38 # configure access-list PEM_LOOP ports 2:48 egress
Error: Policy PEM_LOOP has syntax errors
Line 3 : Attribute cvid is not supported in this platform.

ACL is very simple as below and I tried to apply it ingress and egress on untagged VMAN port.

entry 1 {
if {
cvid 10;
}
then {
count HIT ;
permit;
}
}

version of the EXOS is 15.3.1.4
patch1-44

Please advise

RE: Creating VLAN ACL on BD8806

StephenW — Tue, 19 Jul 2016 18:34:00 GMT

According to the log it looks like CVID is not a supported match condition on this platform.

RE: Creating VLAN ACL on BD8806

Alaa_Naifa — Tue, 19 Jul 2016 20:45:00 GMT

Yes i can see that but why !! Its black dimond 8800 and the image is not old

RE: Creating VLAN ACL on BD8806

Drew_C — Tue, 19 Jul 2016 20:45:00 GMT

Can you provide the output of

code:

show slot

? It may be that the particular module you're using doesn't support CVID as a match condition.

RE: Creating VLAN ACL on BD8806

StephenW — Tue, 19 Jul 2016 20:45:00 GMT

Alaa,

Any platform that does not support egress ACLs will not support the CVID match criteria on egress. Lets look at what modules are installed as Drew is asking for.

Reference:
http://documentation.extremenetworks.com/exos/EXOS_21_1/ACL/c_cvid-acl-match-criteria.shtml

RE: Creating VLAN ACL on BD8806

Alaa_Naifa — Tue, 19 Jul 2016 20:45:00 GMT

Slots Type Configured State Ports Flags ------------------------------------------------------------------------------- Slot-1 10G4Xc 10G4Xc Operational 4 MB Slot-2 G48Tc G48Tc Operational 48 MB Slot-3 10G1Xc & nbsp; 10G1Xc Operational 1 MB Slot-4 G8Xc G8Xc Operational 8 MB Slot-5 Empty 0 Slot-6 10G8Xc 10 G8Xc Operational 8 MB MSM-A MSM-48c Operational 0

RE: Creating VLAN ACL on BD8806

StephenW — Tue, 19 Jul 2016 20:45:00 GMT

You have correct HW. It looks like EXOS 15.4 is where CVID was supported as a match condition. I would upgrade and the ACL will work.

RE: Creating VLAN ACL on BD8806

André_Herkenrat — Tue, 19 Jul 2016 21:06:00 GMT

sorry, but 15.3 is old...