CommScope RUCKUS Community Forums

mielch_qwerty · 05-07-2019

Hello all. I will be grateful for the helpI have applied ACL on a VE interface and it seems ACL was applied not only on VE but on physical interface too. Is it correct?I have not found any info about it, except for "enable acl-per-port-per-vlan" but ...

mielch_qwerty · 05-10-2019

Thanks to r/Brocade on reddit i have found an explanation.There is routing code on ICX and ve interface is like a subinterface on a cisco router other than an interface vlan on a cisco switch. Thats why the ACL behavior on VE is so.

mielch_qwerty · 05-07-2019

Are you saying if you put an ACL on an ICX VRI (i.e. a VE), that it will also filter the traffic between multiple physical interfaces within that same VLAN if routing doesn't occur?That's the thing! SW1-----------ICX-----------SW2 1.1.1.1 1.1...

mielch_qwerty · 05-07-2019

Hi NETWizz, Cisco doesn't block traffic on physical interfaces by applying ACL on SVI, while ICX does.

mielch_qwerty · 05-07-2019

ok, thank you for help  that's a pity though, that this behavior is not mentioned in any documentation

mielch_qwerty · 05-07-2019

but there are no ACL on ports 1/1/1 & 1/1/2, just on VE 1. Can i change this behavior or just have to keep that in mind?In cisco wolrld it is quite different and ACL on SVI doesn't block traffic on physical interfaces.

CommScope RUCKUS Community Forums

User Statistics

User Activity

access-list on VE interface blocks traffic for whole VLAN

Re: access-list on VE interface blocks traffic for whole VLAN

Re: access-list on VE interface blocks traffic for whole VLAN

Re: access-list on VE interface blocks traffic for whole VLAN

Re: access-list on VE interface blocks traffic for whole VLAN

Re: access-list on VE interface blocks traffic for whole VLAN