Hi, I'm applying ACLs to different VLANs and I've noticed that when applying them, they are only applied to tagged ports, while the ACL is not applied to untagged ports. Is this normal? I've tried with different X695 and 5320 devices and different firmware and the behavior is the same. The only way I've found to apply ACLs to an untagged port is to apply them to the port itself instead of to the VLAN, but this implies that an ACL-slice is consumed per ACL line and port and it doesn't seem like the best solution to me. It only happens when applying the ACL in the egress of the VLAN. Is there a better way to solve this?
