SLX 8720 - ACL for outbound not allowed

[Alberto_Oter]

Hello experts,

I just want to confirm if this is a hardware limitation (My device is a SLX 8720) or other problem I've not identified, I applied an IPv4 & IPv6 Inbound direction and these are working as expected but at the time I tried to apply in the outbound direction:

IPv6 is showing the following error: %%Error: Applying IPv6 ACL in egress direction not supported.
IPv4 is showing the following error: %%Error: Applying ACL over Port-Channel in egress direction is currently not supported.

Both were tried to be applied at Interface Port-channel and interface Ve with same result.

Besides of this, the command as per documentation to verify the ACL counts looks like is not working as expected, here the example, it does not like the acl name:

SLX701xs1# show access-list ip ?
Possible completions:
<IP_ACL> Access List Name (Max 63)
| Output modifiers
<cr>
SLX701xs1# show access-list ip v6_gnbs_piz_inbound
---------------------------------^
syntax error: unknown argument

Thanks for your help.

[Michael_Morey]

Alberto,

The messages you are seeing are expected.  

Per the SLX-OS Security Guide:

https://documentation.extremenetworks.com/Extreme%20SLX-OS%2020.7.3%20Security%20Configuration%20Gui... (page 43)

IPv6 Egress is not supported:

Regarding the IPv4 Egress being applied on a Port-Channel, this is in fact a hardware limitation of the 8720.  The limitation for the 9250 mentioned on page 38 of the same guide also apply to the 8720

Lastly, your command is not completing as you are not providing all the required arguments:

SLX# show access-list ip acl_Name ?
Possible completions:
in Ingress Direction
interface Show ACL for specific interface
out Egress Direction
SLX# show access-list ip acl_Name
-------------------------^
syntax error: unknown argument

Please use "show access-list ip v6_gnbs_piz_inbound [in|out]" or specify the interface and direction you are wanting to look at.