cancel
Showing results for 
Search instead for 
Did you mean: 

ACL for add-vlan-id

ACL for add-vlan-id

Danial_Jalil
New Contributor
I want to add an ingress ACL to a port that adds a vlan to an untagged traffic. if the traffic is tagged it should add a second vlan. following is my code but somehow i am facing error. is it the right syntax to implement it

entry testing {
if match all {
} then {
permit;
add-vlan-id 51;
}
}

#configure access-list testing ports 4 ingress
23 REPLIES 23

It should work. Have you added and removed the ACL? or refresh the policy?

Any help please?

Yes the vlans are allowed on both the ports.. and untagged traffic is expected on port 46 ingress .

Danial, what sort of traffic is expected in port 46 ingress. Tagged or untagged? Are the VLANs allowed on port 46 also allowed on port 45?

I still am not able to redirect the flow from port46 to port 45.i am receiving traffic on port 46 but it is not redirecting it to port 45 as shown in the statistics. can you tell me what am i doing wrong? below is the configuration..

ACL....

entry one {
if match all {
} then {
redirect-port 45;
}
}

* 46 testing2 ingress 1 0

X670V-48x.40 # show ports 45-48 statistics
Port Statistics Thu Mar 29 11:21:56 2018
Port Link Tx Pkt Tx Byte Rx Pkt Rx Byte Rx Pkt Rx Pkt Tx Pkt Tx Pkt
State Count Count Count Count Bcast Mcast Bcast Mcast
========= ===== =========== =========== =========== =========== =========== =========== =========== ===========
45 A 0 0 0 0 0 0 0 0
46 A 0 0 1251587 1882386848 0 0 0 0

========= ===== =========== =========== =========== =========== =========== =========== =========== ===========
> in Port indicates Port Display Name truncated past 8 characters
> in Count indicates value exceeds column width. Use 'wide' option or '0' to clear.
Link State: A-Active, R-Ready, NP-Port Not Present L-Loopback
0->Clear Counters U->page up D->page down ESC->exit
GTM-P2G8KFN