ACL application
ACLs can be applied as follows:
| ACL type
Direction |
IPv4
In |
IPv4
Out |
IPv6
In |
IPv6
Out |
MAC
In |
MAC
Out |
|---|---|---|---|---|---|---|
| L2 interface (port) | Yes | Yes | Yes | Yes | Yes | Yes |
| L2 LAG | Yes | Yes | Yes | Yes | Yes | Yes |
| L3 interface (port) | Yes | Yes | Yes | Yes | Yes | Yes |
| L3 LAG | Yes | Yes | Yes | Yes | Yes | Yes |
| VLAN | Yes | Yes | Yes | Yes | Yes | Yes |
| Management interface | Yes | Yes | ||||
| Control plane (per VRF) | Yes | Yes |
NOTE:
The following match criteria is not supported. If this match criteria is attempted to be configured, an error message will be displayed and the action will not be completed.
TTL on IP ACLs
NOTE:
To apply IPv4 and/or IPv6 ACLs to the management interface, apply them to the control plane on the management VRF.