ACL for add-vlan-id

[Danial_Jalil]

I want to add an ingress ACL to a port that adds a vlan to an untagged traffic. if the traffic is tagged it should add a second vlan. following is my code but somehow i am facing error. is it the right syntax to implement it

entry testing {
if match all {
} then {
permit;
add-vlan-id 51;
}
}

#configure access-list testing ports 4 ingress

[Sushruth_Sathya]

Could you try the following -
entry rule {
if {
vlan-format untagged;
} then {
add-vlan-id 51;
class-id 2;
}
}

I remember encountering this in a case. "Add-Vlan-Id" works with class-id. Also ensure the VLAN ID you are adding is an available VLAN on the ingress and egress ports.

[Sushruth_Sathya]

Available VLAN means that the VLAN must be added to both the ingress and egress ports.

[Sushruth_Sathya]

If you want to remove and ACL on a port, then the command is -
unconfig access-list ingress/egress

[Danial_Jalil]

Can you also tell me how to remove the vlan on the other side. is there any ACL rule or anything that can remove the added acl on the other port at egress..

[Danial_Jalil]

it works, it seems for ingress ACL class id is needed..thank you for the help Sushruth.. you are awesome 