ACL on VSP Voss with VRRP

LionelH — Tue, 20 Sep 2022 10:10:50 GMT

Hello,

I have two network Core VSP4900 with VRRP Active Backup Enable.

I want to activate ACL on differents Vlan.

For example, I Want to permit Vlan 4 to Vlan 3 and deny Vlan 3 to Vlan 4. It's uni-directionnal?

I Activate the ACL below in vlan 3, Vlan 3 is block toward Vlan 4 but VLan 4 cannot communicate with Vlan 3 either. I don't understand because I don't activate ACL in vlan 4.

filter acl 3 type inVlan name "VLAN3"
filter acl vlan 3 3
filter acl ace 3 1 name "VLAN3toVLAN4-DENY"
filter acl ace action 3 1 deny
filter acl ace ethernet 3 1 ether-type eq ip
filter acl ace ip 3 1 dst-ip mask 10.71.4.0 0.0.1.255
filter acl ace 3 1 enable

Anyone have an idea ?

Thanks,

Best Regards,

topic ACL on VSP Voss with VRRP in ExtremeSwitching (VSP/Fabric Engine)

ACL on VSP Voss with VRRP